We have setconsole("HIDE") in the script, but it doesn't prevent the users from either pressing CTRL-ALT-DEL, and ending Kixtart, or clicking cancel on the "Please Wait while your logon script executes" box.

Thats where our real problem lies.