Lovers of Fortress Convince Me

[GRAY, PAUL]

We have just upgraded to W2K server (from NT4) and I am in the process of developing a lock-down using Group Policies.
So far -- the only thing I have found that I can't secure using this is Outlook Express --
We don't want users able to access this from the 'New Message' or Send URL or Send Page choices in IE.

I'm going to be faced in the next couple of days with a meeting with some folks who have not seen what we can do using W2K's internal resources -- and some of them are going to insist we really NEED Fortress and Cooler -- largely because someone else told THEM that we did.

We are using IE 6 as our front end. We have about 6 local cd-rom products that we run using KixStart Scripts -- everything else users access is Web-based.  Basicly I just need to prevent users from installing/running their own software (chat clients etc) and prevent them from saving to our C: or network drives (saving to their A: drive is no only ok - but encouraged).

I'm from the school of thought that the more layers of programs you pile on -- the greater the chance of unwanted side effects.
So I am leaning toward NOT adding these extra pieces.

Many of you know much more about Fortress and Cooler and W2K Group Policies than I do -- 
So - before I go toe to toe -----
Convince me I'm wrong -- 

Thanks

Paul H. Gray
Library Manager - LAN & CLC
TCC Northeast Campus
Hurst, TX