Hi Max, if you're running Windows 2000 server, with Active Directory running, then you're laughing..
Join them to the Domain so users must be authenticated to gain access to the network - then create an Organisational Unit, in Active Directory, and place the student user accounts in this OU -...