98 security

I relize that 98 is not a secure o/s BUT.
I have a client that does not want to upgrade. He has a NT W/S as a server and two 98 boxes. No problem locking down the NT box
but how can lock out the 98 machines.?