[Samba] Workstation Restrictions / System Policy / User rights

[admir]

I have a problem.
I neet to set up a school netork with 10 desktps (Win2000).

I have to make desktops secure as posible. I dont want users installin or
uninstalling programs and drivers. I dont want them to change desktops viev
too.

Beacouse samba does not supports active directory, I am not able to apply
some kind of system policy and domain policy.

How can I do this?

Pls. hellp.

Admir