Accounts Privileges

How can a user account, guest or any account on an NT server network.
Be set to remove the privilege of being able to download or install applications. And also hide certain programs or icons such as the Network Neighborhood icon from any computer desktop connecting to the NT Newtwork?