erik,
It really sounds like you are in a position where you need a lock-down policy. That is, you restrict the usage of what the client runs.
Look into the use of Policy Editor or GPO (Group Policy Objects). These are, of course, from Microsoft.
Kent
