Maybe a very user unfriendly option.....

How about checking the service state or if it is present at all, check if the files still exist if not remove the service using Xnet. After removing the service re-push the client app. Maybe one or more reboots are necessary, don't know not using Altiris.

Like I said not so user friendly but he, they remove the files and disable the service. This way they will get burned by the things they do but are not supposed to do. Maybe they will learn something this way and maybe this a a way to show the higher powers that admin privs to everyone is not a good option because the systems get f$#@cked up by the users.
_________________________
Mart

- Chuck Norris once sold ebay to ebay on ebay.