Adhoc query suggestions

Hi,

We have a SQL Server database which users can link to via their MS Access
installed on their desktops. What is the best way to handle adhoc queries
which the users will want to run ? In particular, is there any way that I
can prevent the user from creating a cartesian query that runs and runs?

Since I'm new to this, any suggestions or experiences would be beneficial.