Howto deny user access to entire hard drive except Desktop?

I would like to limit user access to the Win 2000 desktop only, using Win 2000 Server and Active Directory Group Policy. I already used the “Allow access to all drives except “C” drive”, and this does not work by itself. Help?

Thanks,
Megabyterudy