Accounts Privileges?

How can a user account, guest or any account on an NT server network. Be set to prevent that or those particular user login in from any winows 98 workstation of being able to download or install applications. Also, how to hide certain programs or icons such as the Network Neighborhood icon from any computer desktop connecting to the NT Newtwork?