>Thank you all, it seems NT is the way to go, I can use Win95 workstations and and an NT server controlling security, right?

You'd use the NT server to maintain user-level access; it's still going to involve using the Policy editor to control access to the Control Panel applet under Win9x, but it can be centrally administered as a function of the login to the domain.