Some possible options:
1. Set a boot password in the bios.
2. Use the Windows logon password, it's already there to protect from unauthorised access.
3. Write a filter to intercept I/O requests if the system is locked. To do this you will need to learn how to use the
Windows DDK[
^].