Lock Down Laptops w/o having Win Server

We need to be able to lock a specific user on several laptops to take away run, My Docs, install, etc. The laptops will be in vehicles and not be connected to a Windows Active Directory Domain. They all have XP Pro. I have looked local security and gpedit.msc however those applie settings to every user on the laptop which not what we want. Any Ideas?