Lap top security risk on LAN

I have an issue with laptops connected to the network, and the ability to use the modem to dial up to an ISP and by-pass the firewall. They are using WIN 98 on a NT4 server, I don?t want to use hardware profiles as these can be bypassed.