If I wanted to set up a LAN where people could use computers, but I would lock the BIOS so that it would not allow for them to run boot disks and such for security purposes, would there be a way of someone working around it?

Assuming I'm using a PhoenixBIOS 4.05, Windows NT, would there be scripts that would allow someone to extract the BIOS password and boot from a disk? Or maybe even use a master password. If so, what would these thing be. If there are master BIOS passwords there's obviously nothing I can do but for scripts, I could prevent them with custom virus detection.