Pbb321

Yes, in the group policy, you can specify to either lockout the UAC controls all together, or Force it to on. Even though they can still disable it when you force it to on, they have to restart their PCs, therefore refeshing the GPO at restart and leaving it on, no matter how many restarts.

FYI... This was all on server 2008 for me, dunno about 2003 and lower, but i'll look.

Hope that helps. (If not, just reply)