An easy way to accomplish this is via remaster. Use the big KNOPPIX file which was created after remaster. Load this file via pxe to your client. Now you have a read only OS with all your custom settings.