Or you could use policies.
It would be easy with NT, just dont give the users the admin password.
With 9x, you'd have to setup a policy on your PDC.

- jamie