can make network services closed, and prevent access that way, but that's it, everything that has to run on a user's computer is going to be open