In the following environment
A Windows 7 ultimate machine
Staff log in to this machine from their workstation via Remote Desktop connection use the applications installed on this machine and save there all files.
What I want to accomplish
I am adding an outside assistance to do data entry in quickbooks but want he should “only” see the quickbooks program and file he will be working on no other programs/icons/ files (as in a server environment with sharing permissions) is there a way to accomplish this in this environment?
If not so restrict access would be the only option. Is the only way to do it by restricting folder by folder that has documents in it (even so it's not secure against opening programs that save their data in the program folder) since restricting the C drive is not an option (maybe it is and then share the quickbooks program folder and file folder, don't think it will work)?
PS it's a accounting office so confidentiality is required.