How can I make it difficult to install a new operating system on a certain computer?

Solution 1:

The only tools you have for preventing installation of a new operating system on standard PC hardware would be to do something like this:

  • Lock the case. Use the Kensington slot if your case has one, otherwise physically lock it somehow.

  • Configure a BIOS setup password.

  • Configure BIOS to boot only off of first hard drive, to not boot off any external USB device, LAN, or CD-ROM. Ship the computer without a CD-ROM and/or floppy if possible. Internally disconnect or epoxy USB ports.

  • I'm not sure if you can configure GRUB to never boot from an external drive, but if it's possible, GRUB should be configured this way.

  • Select good root and user passwords.

Of course, if they physically open the case, you can't do much, but this should prevent casual reinstallation of another operating system.

Solution 2:

If you are giving someone physical access to a machine, there is nothing that you can do to stop them.

Solution 3:

You might want to replace any visible screws with security Torx, especially the screws holding the hard drive in place. That way they can't install another OS on a different hard drive, swap out the hard drive, then boot from the new hard drive. Anyone can buy security Torx drivers, but it'll slow down a normal person, who probably won't have any in their toolbox.

Solution 4:

There are a few Dell computers that need an administrator password to boot from anything other than the Hard Drive. The downside being that if the CMOS battery is removed for 30 seconds, they would then be able to bypass any previously set BIOS settings as they are all completely restored. But that is just my 2 cents. Unless the person you are giving this too really knows that much about resetting the BIOS just to install Windows, then don't give them a computer, but otherwise, this can prevent casual installation.