What should be done in order to prevent someone from booting into ntfs dos in win 2k advanced server?

Thanks