Controlling user rights

hi

i have a windows doo server4 domain controller and, mixed workstations (98, nt, 2000)

i want to give security like that, in none ofm the user profiles, controll panel should be visible/enabled

and even users should not be able change desktop settimgs like, wall paper/ screen saver

is it possible