While XSetup is indeed a great proggie, and is a must-have for every power user ,there r other solutions to your problem as well. For example ,Folder Guard ,available from WinAbility.com website allows u to also hide or make "read only" any resources/files/folders of your choice,restrict user access to Control Panel or any of it's applets or other resources. With it, u can protect files etc from being modified or otherwise affected by any application, such as Explorer, Office or even DOS promptinput.It provides password protection for any resource of your choice, user-dependant permissions, user validation at logon and more. (lol, I do not work for WinAbility, I just saw this little puppy in use).There r also programs like Norton DiskLock, that allow u to password-protect any number of files/folders or other resources on your PC/s. Believe me ,the list goes on and on...u'll just have to search the Web, test them all and make a final choice. Or-just convince the boss to upgrade to NT/2000 family, where user restriction is much more powerful.
HTH
Good luck.
Talli