|You mean access to users not if the switch works or not in normal use?|
Yes except cli.
Various ways to deny access, most revolve around how to authenticate users. Otherwise via access to it on lan or other authentication between.
See how in user manual, access switch with correct level and see config.
"Best Practices", Event viewer, host file, perfmon, antivirus, anti-spyware, Live CD's, backups, are in my top 10