I made a script that loaded with each user as they loaded on a domain before that just adds a proxy in interenet explorer settings to 127.0.0.1 and enforced a policy that does not allow changing of ie settings.

They could still use other browsers but it makes IE its self pretty useless..