disabling the network

What are some ways to disable the network connection in Win2k?

I have a lab running Win2K, and I have hidden the control panel from the users. However, I have found some computers where the network connection has been set to disabled. What are some ways that this can be done without access to the control panel? (and how do I go about preventing users from doing this?)