win2k

I am setting some machines up at work and I need to lock them down because they are going to be public access terminals (surfing the net). The machines are Win2K Pro and they are part of a workgroup not a domain. I messed around with the group policy editor but it affects all users...