Limiting network access on a Win2K

We have a programmer in India. We’ve set up a Win2K laptop on our LAN and want him to have access to this machine. The access is via a T1 line through a router. Once he gets to this machine we want him limited to this machine – no access to the other workstations on the LAN. We are a small firm and at this point do not have a domain server. The “server” is an NT4 and I can keep him off those three drives by denying him a password. However most of the workstations are on a peer-to-peer andI need to keep him out of these machines. I’ve looked through the help on the Win2K laptop but have not been able to find a way to keep him out of the peer-to-peer machines.

Thanks,

JOHN