Just a correction to what I said earlier... instead of making all the registry keys under HKEY_current user make them under HKEY_local Machine. That way they can't make another user account and use delete the history under that account.