using zen6.5sp1 and recently upgraded machines to XP-SP2

Has anyone seen or know of ADMs to limit or force certian windows features
in SP2. Most importantly is the stupid windows firewall. Every new user
on the computer will open the Windows security panel and half the users
turn on the windows firewall, which then breaks BM connectivity and other
Novell and Zen apps.