> With a physical access to the machine, you can reconfigure the BIOS > to boot on your Live system. Even with a BIOS password, it is a > matter of removing the battery on the mother card.
You can also hit it with a hammer. That kind of things are outside the scope of the operating system, and would need to be taken into account by the system administrator anyway. What *we* can do is closing a huge backdoor in *our* *software* that provides no extra functionality. The default setting would be enough for a school or enterprise deployment by only configuring the BIOS and locking the case, which are common practices on such environments.
