either disable the messenger service or NTFS permission NET.EXE. Granted a
tech-savy user will be able to copy NET.EXE from another (home) machine to a
floppy and then run it from elsewhere on the machine.
Another approach is to use Sofware Restriction policies if the boxes are XP.
Restrict NET.exe.
--
Jeremy Moskowitz, MCSE, MCSA, MCT, CNA
Author of Group Policy, Profiles, and IntelliMirror http://www.amazon.com/exec/obidos/ASIN/0782128815
The Groundbreaking SYBEX book
in the Mark Minasi Windows 2000 Series