Windows 2000 Lockdown

I am trying to build a Windows 2000 PC that is bullet proof without using Active Directory. I have been able to point ny desktop out to a server and have made many regisrty hacks and have used some of the local group policies but I am not able to stop all holes! I cannot disable “My Computer” from the desktop and there are still things that can be done by right clicking on objects in the “start menu”. If any one has any ideas or has done this already and has the solution I am open to suggestions.
Thanks,
John
jthompso@unch.unc.edu