Fighting unauthorized remote control

I have some computer settings being remotely changed. I am sure it is internal and I think, but I am not absolutely sure, the intruder is using netbios. How can I safely disable netbios and is there a way to trace the activity back to the desktop creating the problem?