This OS is built on the premise that if you are at the keyboard you are allowed to do pretty much what you want. This is why it is nearly impossible to lock down Windows.

If you research this you find that limiting access is a cat and mouse game. That is, every time you close off one hole they find another.

Rather than play that game why not remove their access if they don't abide by the rules?
Bob