That one might be pretty simple... remove cdrom and floppy drives and don't connect to the internet. Oh, you may want to disable the adding of other hardware too... like zip drives and usb flash...