You can enforce certificates using the certificate server, and then
permissioning netbio based on certificates.

The best way it to shut down their network if it doesn't have a valid
certificate:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S
erverHelp/69d8484b-8e31-408c-a12...

[ more ]