Certainly WindowsNT has the security features you desire. You can create a group of users with very specific rights/privileges. For instance you can prevent this group from installing software and give them access only to the directories/files required to run any necessary software. A pretty thorough understanding of NT is required before you embark on this though.
Duncan Mackenzie
duncan@lk-cmm.com