You mean you don't want them to be able to send private messages to users, post on activity streams, request connections, etc..? Only way to do that is as you're already doing through ACL. You'll need to be more specific in regards to what you're trying to limit for me to suggest anything further.