GPO advice please

Hiya, we run server 2003 and am currently configuring a new GPO. I am
trying to make this policy as tight as possible as it is going to be applied
to the students OU in my school active directory domain.

I have locked it down as far as only allowing access to My Computer, My
Documents, and Printers and Faxes, Log off and Shut Down options from the
start menu.

However, I would only like to allow students My Computer, My Docs, Log off,
shut down and Internet Explorer from the start menu. I would like to keep
the desktop clear if possible.

How do I get Internet Exporer onto the start menu without allowing other
programs to appear? How do I get Printers and Faxes to disappear (I tried a
customised .adm file for this, but did not work)

Also, is there any way of hiding menu options such as tools in My Computer.

Am I trying to be too tight here? Is there a way of doing this through a
GPO in combination with a mandatory user profile or would you suggest a
third party solution?

Many thanks

ed