restrict IE as described, and in change HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell from explorer.exe to "iexplore.exe" (or firefox etc) and have the home page set to your site.... you'd also need to disable task manager in local security policies to stop people just running explorer.