I would concure with TT4U, a bios password is the Most "idiot proof" way to prevent someone/anyone from doing something on your PC, 2nd would be if your system had a Keyboard Lock on the case, followed by if the system is Networked, setting up a Policy with policy Editor to prevent unauthorized use, followed by one of the Software products mentioned