How do i prevent a normal user from installing applications, accessing registry, changing backgrounds, etc in NT 4.0 workstation?