Lock out 1 user within Enterprise Manager

From: CPS (anonymous_at_discussions.microsoft.com)
Date: 02/23/04 

Date: Mon, 23 Feb 2004 08:01:09 -0800

I have one rogue user who constantly creates, deletes,
and just does things in the system that are not
authorized causing tons of administrative work on my
end. Is there a way to allow this user ONLY to READ
everything from within SQL-EM, vs. writing or creating
anything. All this person does is Crystal reports, so I
might just remove the software altogether. But I'd like
to restrict rights because they'll definitely come tell
me that they couldn't do something due to restriction, at
which point I can bust them. Thanks!