I have a Win2k domain running a small network. Attached to the network are WinXP and Win98SE machines. What I am attempting to do is limit a certain group of users by only allowing them to run specific programs (mainly blocking IE). The other groups of user need full access to the system with no restrictions. What is the most efficient way to do this?