why not use memory sticks and a bit of software, when the user leaves the machine they unplug the stick which locks it and when they return they just simply reinsert the stick back into the machine. now this may not work if you have have removable devices disabled by a group policy. This is just only idea to bounce of you, but it is a good question