I want to do something that seems so obvious, and so common, that I'm surprised it's so difficult to figure out how to do. What I want is that when a user logs into a Windows XP PC they are thrown into an application and can access nothing else on that PC. They can't get to the Windows Shell or anything else, just run the application. And when they exit the application they are automatically logged off.
Running the app is easy enough via a logon script, but that still leaves the user with access to the Windows Shell.
So, how does one truely lock a user into a single application?