Nokia is absolutely correct on that one. You can lock down IE to the point where they can't even use it. The one easy thing to do is this (if you're just looking to lock down a few machines and not...