If you're using W2K server, then you should be able to push down a group policy to the local machine, since they are using VPN. I'm not sure if you can make the Start button go away entirely through the policy editor, but you can disable or turn off just about everything in the Start Menu. So even if the user clicked on the Start Menu, nothing would be accessible.
jw9000