Make sure if when teachers leave, their account is deleted. Otherwise at the start of the year, when the passwords are reset, kids will just log to a redunant teachers acccount and change the password. You then get an account with full admin privilages to cause mayhem on.
Another good one is...