Do users have to see Netlogon ,Sysvol ?

On my main domain server (Win2K) I have Dfs installed, but on that same server users see the netlogon and Sysvol folders and can go inside them. Do these have to show and let users in? If not how do I get around this?