I'm sure there's a way to just disable that feature in Group Policy. Anyways, anyone with physical access to your computer has total access .