there isnt a command implemented into XP that easily allows remote computers to shut others down, id imagine he is running some sort of trojan on the systems or is using your school system's network control software if they have any