Easiest way to do this server 2003

Ok so I have set up a users machine with 3 vms. I need to lock down the machine for this user so the only program he can open is Vmware. We are using server 2003. What would be the easiest way to do this besides manually going in and disabling everything in a gpo?