It required attention to detail, from a sysadmin / desktop admin perspective, but it was definitely possible and paid dividends in users being unable to completely destroy machines like they could on the DOS-based Windows versions. I put out a ton of Windows NT Workstation 4.0 and Windows 2000 Pro w/ least-privilege users. It was so convenient to be able to blow away a user's profile and start w/ a clean slate, for the user, w/o having to reload the machine.