Yeah, unfortunately I think the best way to secure it is to go in and use the NT profiles on the client's NT box.
IF you can find the registry entry that corresponds, then Kix would do it. But you know that already.

Sorry I couldn't be more helpful

------------------
Tony Reno
renoa@rfa.org