NT Security – Users Installing Software

I need to Lockdown the Workstation on NT 4.0. What setting can I set, to not allow users to load any type of software? I have made the adjustment in to User Sign-on and Profile. This does not appear to be enough.