I am at my work computer and have no way to check this out right now, but isn't there somewhere in Group Policy Editor that lets you disable CTRL-ALT-DEL? It might be something in there.
I seem to remember something to do with that, but not for sure.