Profile Manager

I need to limit the desktop and access to network shares on my net. My biggest prob is that my databases need to give full control to the users so I can’t limit access there. I need to hide network neighborhood and windows explorer and dos prompt. I serve a w2k database from win 2000 server and also a dos based dbase from novell server so users must have access to those programs on desktop or start menu. Can you give me some ideas. Thanks.