Preventing users from logging on the console won't help with physical security, a user with access to the system can always boot single user or via a RAMDISK kernel.. perhaps steal the entire system (..or drives).
There is no supported way of doing what you ask, beyond simply unplugging the keyboard or monitor.. or setting up a serial console.
|