Use the UNC path as opposed to mapping a drive letter. PWB will not open to the network any more then what is available locally. You can also put PWB in its own shared folder and make it read only.
We're using a combination of the two. We have the PWB files on a network share, but since the performance when using large filter files was really becoming a problem, we've set it up now so that when the public stations start up, they copy all of the current PWB files to a local folder. The files stay up-to-date, but run locally for better performance.
I have 17 and I'm doing it purposefully as standalones. Keeps me busy and out of trouble and off the streets.
We do have a server here, a Dell poweredge 2500 I think, and my director got excited about using it for the library, but after I told him I would use it as a game server and porn video downloads he keeps the door housing it locked.
Complexity is the enemy of security
-- Steve Gibson