PREVENT UPGRADES FROM WIN95 TO WIN98/2K

How can I prevent any user from upgrading a WIN95 machine to a WIN98 or to a WIN2000 machine? I want to control the configuration in a non-networked environment. Thanks