Easy if they have access to any profile.
Many forget to password the default Administrator.
Also, if they get physical access, any security can be broken.
If you place good passwords on all profiles, NTFS File System, you are
reasonably secure as long as your computer is properly protected: http://www3.telus.net/dandemar/Security.htm
You also need to control physical access and use common sense.