If I were you, I'd look to create a local security policy and put it in place. This policy could limit access to only certain parts of the hard drive, and disable input from any other sources. For things like this, a security policy is a better bet.
If you don't want to go that route, you can follow the instructions
here[
^].