Limit users to local machine

I’m network administrator for domain with 100 users. We have 3 windows 2000 servers. All workstations are XP-Pro.
Want to limit users from installing games and junk they get from web. how can i prevent users
from installing junk programs on their workstations.
Thanks