They can also require web filtering and surveillance software, of course.
In many schools, this kind of software, web filtering (including filtering of proxies and category of SSL-based websites) is ACTUALLY REQUIRED in the US, for many schools to keep funding under various federal programs -- eg E-rate.
Sure, there are things that may be tweaked by the school, but the are laws setting the basic boundaries for such modifications.
Well, they are perfectly within their rights to provide a policy of "No laptops allowed past this point", at the door.
Anything less is a concession on their part.
In the case of your physical PERSON, they can't require arbitrary concessions, such as body cavity searches without infringing on people's rights.
With laptops however; they can require arbitrary modifications or standards of their choosing, before the laptop is permitted access.
Fully updated, not running an EOL operating system such as Widnows XP, No infections present and working antimalware, would be some common restrictions.