Substantially exclusive control of a computer is provided by prohibiting users from gaining direct unconstrained access to underlying computer resources such as the operating system, file system, boot software, network operating system, and disk drives, memory, or other storage devices.