You can disable individual, group, or global ability of NT workstation users from granting access to workstation resources (create shares) by controlling who has right Create permanent shared objects. Access User Manager for Domains, User rights policies, advanced user rights.

You need the tools in the Resource Kit if you have workstation and its a MUST if you are supporting workstation.