There are a couple of ways you can try. You can use Group Policy user
configuration/administrative templates/Windows components/Microsoft
management console to restrict what mmc snapins a user can use or you can
use security policy for a domain computer to prevent access to the logs for
the guests group and add the users accounts or group to the guests group on
the server which would probably be the best option if the computer is a
domain member. The link below explains more which also applies to Windows
2000. --- Steve
