deny users access to local disks

i have a problem where users are installing games and other programs on work machines i’m sick of re formatting the damn things all use win 2k pro but i have so far been unsuccesful in denying access to local drives and settings e.g. control panel etc i know in nt you can make “dumb” accounts but 2k allows too much access to the settings for my liking some help please people!

thanks

Scott