What we need is one piece of software to run. Only one.
Everything else can be disabled, even Explorer as it's not needed for our software.
The user account will ONLY be able to use this one piece of software, the admin account is wide open.
Similar to Kiosk mode, but Kiosk mode is easy to get around, so we're locking it down the old school way.