Q. How do I keep users from booting from CD?
A. There is a firmware upgrade that allows you to set a password, which is then required in order to boot from CD. It also password-protects against users holding down option to boot from a different partition, or holding down command-option-O-F to boot into Open Firmware.
Read
KBase Document 106482: How to Set up Open Firmware Password Protection for details.
Q. How do I prevent the login window from displaying the last user who logged in?
A.
KBase Document 106691: How to Prevent Prior User's Name from Appearing During Login