Do we speak about Windows Terminal Server Sessions or do you have a Metaframe Server on top of it ?

Case A: go with GPOs as Les suggested
Case B: Deal with it using the Metaframe policies
_________________________