Restricting Control Panel in NT 4.0?

I recently built a NT 4.0 terminal server. My users can access the control panel. How do I restrict it or at least some of its features?

thanks