For misuse of the system (playing games etc) we ban them from unsupervised access, staff need to authenticate each session before the kids can use it. The ones who vandalise now get to spend a lunchtime with the Head of IT scrubbling keyboards!