And put a check into the login script that prevents users from logging in if Altiris has been tampered with, e.g. the necessary files are missing or the service is not running. Also, start keeping a log of the hours spent and computers involved in troubleshooting Altiris. I'm sure the associated costs make a nice justification to reduce users to 'User' or potentially 'Power User' status.
_________________________
There are two types of vessels, submarines and targets.