Without having more detail, I would say that you could use a combination of
user permissions and user-level group policy. It's hard to say more than
that without knowing exactly what it is that you want to restrict them from
doing. As a rule, you should look to grant permissions/policies that give
t...

[ more ]