On most other laptops, you can put a password in the bios to prevent others from booting off usb etc.
im aware an attacker can remove the drive, reset the bios etc. (though some, like apple, will lock this. makes it more effective)
but, we dont have heads (yet). a boot/firmware pass plus some glittery nail polish(tamper evidence) will solve most problems. it would also make cold boot attacks harder. (and, perhaps some epoxy on the ram)
is there an easy way to set one up? if possible within the next few days as thats my window to return this laptop. cant use it for work without one.