There is a Group Policy under User Configuration - Administrative
Templates - System called "Don't run specific Windows applications".
You can place the names of the executable, iexplore.exe in there to
prevent them
from running it. This is not fool proof by any means but it is a
start.
Be aware that any link that launches a browser will still allow this
to run.
You might also try renaming the executable but that can possibly
cause other issues.
Remember it's always best to test this in a lab first.
Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.