Posibly change the permissions on the drive to deny write access, but you
will have to give a few directorys write access, or you could demote the
user to a guest. If you have the resources then you can purchase a lockdown
program to lockdown the PC, ive used Fortres and Deep Freeze in the past,
they work alright. Or finally you can go to the network level and run a web
security server that does not allow files to be downloaded. (Norton Web
Security)