>"Is there a way to then logout of the server only?"
Not that I know of BUT, if you use ALT-CTRL-DEL to log out it will kill all network logins including the "temporary" ones. Then log back in with the "main" user and the client will forget the "temporary" connections as long as you don't check the "remember my password" button.
>"I am not using domain logon (perhaps I should be!) "
Yes you should, but at the least have each user set up with a user and password (that matches the sme box) and disable auto login so the user has to input user and password every time. Then set up an "admin" account on each box with your admin password. I know it's a pain, but you should really have a bit more security. Also, the user accounts should probably not have admin privlages on their boxes, this will help to keep them from messing up their systems too much. You will have to create (or modify the existing) admin account any way before you try to "lower" the regular users privlages.
Sorry if my instructions are inaccurate but it's been a while (1.5 years) since I used W2K. I don't remember everything but I do know it is very similar to XP and that's what all my clients use.
If you need exact instructions then someone more familar with W2K should be able to be more specific.
Good Luck,
Paul