You'll want to look at some third-party kiosk software (the sort of thing they run on museum displays that are actually Windows in the background).
Nothing beats physically removing access of course as there is always the prospect of work arounds by a determined individual.