I need to set up a local user account in Windows 10 Pro that has limited access to resources. In particular, no ability to make network changes, no ability to look at other account information in the c:\users\ folder, no access to the admin folder in the Control panel, etc. They can print to assigned printers, run programs already installed, and that is about it. They will not be a member of our domain.
What's the cleanest way to implement this?