Disable login in Active Directory

We are running a Windows 2000 shop here and need to do some maintenace. Is there a way to disable the login to Active directory so that no one can login while the work is being done? Along with that, is there a way to disconnect the people that are still active with out going to every server?