deny enduser from IE

Hello, There are a few options. If the number is small, you could do it locally via NTFS permissions. Go to the Internet Explorer folder and find iexplorer.exe. From properties, select Security and modify the users or group permissions. From a Group Policy route, there is in User Configuration>Administrative Templates>System>"Don't run specifed Windows Applications". Select IE, assign the GPO to an OU containing the users you want to restrict and link it to them. See link below. Hopefully, someone else will have a simplier answer. I had 4 workstations and just did it locally. Good luck to you!

http://support.microsoft.com/default.aspx?scid=kb;en-us;323525

For the users you need to restrict, create a group policy that gives them a bogus proxy server IP address. In the same policy restrict the users ability to change proxy settings

User configuration - Internet explorer maintenance
Connection - Proxy Settings

User configuration - Administrative Templates - Internet explorer - Disable changing proxy settings