ways to protect an operating system

Which of the following is a way to protect server operating systems from a short term contractor?