How do I secure a windows 2000 workstation form users being able to install and delet anything on the workstation