how do you "secure" machines if they are windows ones and dumb people plugin flash drives and click on big shiny download ram buttons. genuinely curious.
Note that there may be still ways to bypass it if you're an attacker sitting at the computer, rather than a hapless user.