[charcircuit]

Sadly not all Windows machines are able to use kernel DMA protection, so for those machines nothing will stop you.

[15155]

The obvious next step is to disallow those elderly machines once a critical mass of users have modern-enough equipment. We're almost there.