Some things are best done with policies rather than Kix. That way, users have no code to rip and reverse. The savy ones can undo those quite easily too. If you really need to lockdown machines as in an industrial / institutional setting there's Fortres 101 and Cooler from http://www.fortres.com
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.