use a PC with a copy of server 2003 or virtualize it to a laptop connect to there internet via router (if applicable) then assign a mandatory profile with restricted search rights etc. tada its now idiot proofed.