Set a password in the BIOS and disable boot from floppy & cdrom.

I have no idea about win but presumably files on the hdd would be timestamped.