You can implement Group Policies to restrict these users as you wish. In case you are in a domain environment you can use the Group Policy Management MMC to add your policies on the site, domain or OU level. You can also specify Local Group Policies (desktop level) using the gpedit.msc MMC snap-in.
Note, that local group policies can be bypassed by local admins while site, domain, OU cannot (at least not by using the MMC gpedit.msc snap-in).
Group Policies
You can implement Group Policies to restrict these users as you wish. In case you are in a domain environment you can use the Group Policy Management MMC to add your policies on the site, domain or OU level. You can also specify Local Group Policies (desktop level) using the gpedit.msc MMC snap-in.
Note, that local group policies can be bypassed by local admins while site, domain, OU cannot (at least not by using the MMC gpedit.msc snap-in).
-----------------------------------------------------------------------
Lefteris Karafilis
MCSE, MCTS, SEC
LinkedIn: http://www.linkedin.com/in/lkarafilis
Mail: lefteris@karafilis.net
Blog: http://www.karafilis.net