Do you have internal websites that have to be accessed by these users? It'd be possible to deny use of IE on a per-user level.

-Zeke