windows server 2003 and 10 PCs

I have a small network of winxp pro sp2 clients. I would like to disable any “Your computer might be at risk…” messages and prevent any logged user from re-enabling the windows firewall.

What is the easiest way of doing this? Do I have to go to each PC or can this be done via Group Policy?