locking down a network

I would like to keep people within our corporate network from accessing their computers from home. Can anyone give me any advice on how to go about doing that? Our execs are concerned about sensitive data being copied to an employees home computer. We are currently using a checkpoint firewall. So what ports can I block etc?