Securing Win2Kpro

In a small workgroup network how can I secure the control panel and other sensitive areas from users?

I have created restricted users but they still have access to the control panel and display settings. The workstations I refur to are used in areception area of our medical group and only need to be accessed for online eligibility.

Thanks for the help