The only thing you possibly could do is find ways to disable USB, DVD, and secondary drives in the BIOS or system to avoid a chroot, but that can really hurt productivity and cause other issues.
Other than that, there's no possible way, and realistically no point unless it's a server with critical system data, then you should use encryption keys and strong passwords.
|