We would like to write protect the internal hard drives in the machines in a class environment. The machines are dual boot, running both Windows and Linux (RedHat). 

We are looking for ways to protect the HDDs in such a way that nothing can be written to these in either of the OSs. Just to be specific, we also need to protect the disks from commands like [`fdisk`](https://en.wikipedia.org/wiki/Fdisk) or [`parted`](https://www.gnu.org/software/parted/manual/parted.html). We also want to prevent accidental deletion of files and folders.

The machine users have administrative access. So, password protection is not an option.

(The specific scenario is, the main hard disk is `/dev/sda` and the scratch one is `/dev/sdb`. While practicing disk partitioning in Linux using `fdisk` and `parted`, a few of the students go for `/dev/sda` even after being instructed repeatedly to go for `/dev/sdb`.)

We don't want to write protect other drives including the USB sticks which are often attached to these machines.