If you're in a domain environment, you can do this with the Group Policy
Editor. If you're in a workgroup or stand alone setup, see www.dougknox.com, Win XP Utilities, Windows XP Security Console. You can
apply this restriction, among many others, on a per-user basis.