Registry edits

I’m currently managing a roaming profile in a Windows 2000 domain environment. I’ve been able to edit the registry and limit the amount of access the users have to various resources of the OS. However, I’m having a hard time setting the registry to deny user access to MMC, but yet allow administrators access. I also need to limit access to My Network Places. Any suggestions?