security tab on internet explorer

Hi,
When I setup clients to use the internet explorer, I know under the security tab you could restrict there level of security.I guess my question is what are the best options to disable to provide a tighter security as to where they go by usingthe CUSTOM LEVEL option under the security tab.I do know eventually they may discover the option and change it. Any help would be appreciated.Thank’s in advance