Yes, it can be blocked.

If each person got his/her own workstation, with an IP that won't change, just block that list of IP.

There are also firewall that will let you connect on a per-user basis, like checkpoint. Just choose "user auth". When trying to connect, a special window (an application must be installed on each client) will pop prompting for username/password.

Jean-Francois