If you really want to lock down the computer so the users can only do what you want them to do there's no way around win2k/xp I think.