Win 2k Security

I would like to give users the ability to run
most of the programs on a given win 2k machine, without them having the ability to make any system changes. So far nothing short of giving them administrative privileges would allow them to enable/disable network connections (i.e. to the internet) or run Talkworks Pro 2.03. How can I accomplish this?