active directory on window server 2003

im a occupational therapist in our hospital
i was assigned as information communication technology (ICT) coordinator. i already setup new server on the network pc in the clinic, but my user doing anything aside from their work. in the server theres an active directory and computers they said that i can configure my networks so they have limited work on their computer. what shall i do?
thank you