Win NT.

What do i do that i can disable or retrict some accesses on the window NT for certain users that can not see the “setting” “Run” “find” and retrict the internet access on the workstation?
Thanks in advance!