@dstranathan and @rlincoln , yeah, Deepfreeze. I'm a former Apple Retail employee. Try going into an Apple Store, change the wallpaper, create some files on the desktop, change the dock, etc. then just restart the computer. I loved watching people go around and change all the wallpapers to something funny, crude, etc., then follow behind them doing a
Control-Command-Power Button to force a restart and revert back to our "image".
Thanks everyone. I wasn't sure if Apple considered NetBoot "External Media" or not (I do but, Tim Cook doesn't return my calls).
I got my first T2 Mac today. In a pinch, I was able to disable Secure Boot, boot from a 10.13.6 (build 17G2112) USB drive, and then run Jamf Pro Imaging app from USB to get to the Mac enrolled/managed/on-boarded.
I have DEP but Im not fully leveraging it yet. Time for me to start rockin' DEP deployments. Only concern is a few pre-boot scripts that I need to figure out soon.