Restricting users using IE on 2000 Terminal Server

Can anyone tell me how to restrict all users except the administrator on a 2000 Terminal Server from using internet explorer?

Just recently it has been found to have spyware on as users are being lazy and instead of going back to their desktop to surf, they are using it on the server.

Thanks

OK, I'm sure you could do it via GPO, but why not just remove the domain users' perms to read and execute IEXPLORE.EXE?

Can you use Appsec.exe to restrict the IE application? If not, possibly use of NTFS permissions on the iexplore.exe application?

Have a look at http://support.microsoft.com/default...b;en-us;320181

Thanks guys, i've done what splash suggested and changed the NTFS permissions on the iexplore.exe and that now works...

Keep the little devils out of IE :D

strictly speaking nichomach beat me to it, but that's cos I got distracted while posting...


:D

So long as you got it sorted all is good