In cases like this, couldn't the library administrator just remove the rights for all their machines? Create a user account with less privileges than a normal user and let patrons use that.