Local Windows 2000 Server Security

Ok.. I have a kiosk that HAS to have server running on it. And since it’s a kiosk it will be used by tons of people. I need a way to restrict a user on THAT machine so they can only use Internet Explorer. no drive access, no desktop icons. Got it? also here is the catch, It can’t run active directory.
Peace,
-DL