I need to lock down some computers at work.  I would like for users to
not be able to add/remove programs, change computer settings, and have
the ability to allow/disallow people from making certain
"administrator" changes.
I would like to do this with a free software program, or with a method
built into windows 98.
I also need to be able to turn off access to IE, but ideally, I would
like to be able to get access to it with a password.

for FREE - you can use windows policies (poledit.exe on the setup
disk)..it is clunky and a pain in the a$$ to use.

www.deepfreezeusa.com is a CHEAP and GREAT utility

as for IE - you can add polices for allowable sites. OR you can be
really sucky and have those computers use a DNS server that you
control, add only the sites that you want and then send everything
else to your corporate webpage, I guess you can log IP and domain, if
you want to really be big brother

Thanks for the info, but the deepfreeze is $25/computer, and I don't
really consider that to be too cheap an option...the DNS Server idea
might work, but I don't know how one goes about setting up a situation
like you describe.

your best bet too lock down IE is setup a proxy server , and get the
IE IEAK to design your own version of IE (IEAK is a free download from
Msoft) in which you lock down the proxy

As for locking down 98 , your only option is indeed poledit which is a
B...h to use

http://www.microsoft.com/resources/documentation/windows/98/all/reskit/en-us/part2/wrkc08.mspx

Just enable the Screen Saver with Password set. Set the time min screen saver time.