Restrict Students in WIN2K Pro

I am setting up 75 laptops with WIN2K pro and OFF Pro for agency course use. I want to restrict students from
a. installing & uninstalling software.
b. changing or deleting configuration.

Any suggestion?