An apparatus for obtaining a configuration file over a public network and applying a persistent configuration change to a windows-based embedded image with a write-filter running on a mobile client and obviating reinstallation of an entire windows-based embedded image onto the mobile client, the apparatus comprising: a retrieval module of the mobile client configured to locate a remote repository server (104, 112) containing the configuration file, the retrieval module configured to obtain the configuration file over the public network from the remote repository server (112, 104, 112) while the write-filter is enabled, while obviating reinstallation of an entire windows-based embedded image onto the mobile client; and an apply settings module of the mobile client configured to, each time the mobile client boots up, apply a configuration change to the windows-based embedded image while the write-filter is enabled, based on the configuration file, wherein the windows-based embedded image comprises the write-filter that prevents one or more changes applied to the windows-based embedded image with the write-filter enabled, from persisting across a reboot of the mobile client, wherein the windows-based embedded image supports a graphical user interface and comprises an operating system and one or more applications for the mobile client, and a reset check module of the mobile client configured to determine whether to reset a previous state of the windows-based embedded image based on the configuration file, wherein if the reset check module determines that the previous state is to be reset, the apply settings module is configured to apply a default configuration to the windows-based embedded image and to apply the configuration change based on the configuration file to the windows-based embedded image after the default configuration is applied, and wherein if the reset check module determines that the previous state is not to be reset, the apply settings module is configured to apply the configuration change based on the configuration file, to the windows-based embedded image, while disallowing the default configuration from being applied to the windows-based embedded image. a retrieval module of the mobile client configured to locate a remote repository server (104, 112) containing the configuration file, the retrieval module configured to obtain the configuration file over the public network from the remote repository server (112, 104, 112) while the write-filter is enabled, while obviating reinstallation of an entire windows-based embedded image onto the mobile client; and an apply settings module of the mobile client configured to, each time the mobile client boots up, apply a configuration change to the windows-based embedded image while the write-filter is enabled, based on the configuration file, wherein the windows-based embedded image comprises the write-filter that prevents one or more changes applied to the windows-based embedded image with the write-filter enabled, from persisting across a reboot of the mobile client, wherein the windows-based embedded image supports a graphical user interface and comprises an operating system and one or more applications for the mobile client, and a reset check module of the mobile client configured to determine whether to reset a previous state of the windows-based embedded image based on the configuration file, wherein if the reset check module determines that the previous state is to be reset, the apply settings module is configured to apply a default configuration to the windows-based embedded image and to apply the configuration change based on the configuration file to the windows-based embedded image after the default configuration is applied, and wherein if the reset check module determines that the previous state is not to be reset, the apply settings module is configured to apply the configuration change based on the configuration file, to the windows-based embedded image, while disallowing the default configuration from being applied to the windows-based embedded image.