Deploy firefox and restirct users much like you would IE with group policy.