Lock down computer environment during session?

Hello! So we're planning on allowing freelancers to access our computer which is setup currently as unattended but I'm looking for some advice on locking down the virtual system so that they can only view the system and be able to access the programs that are only available on the desktop, without access to anything else. FYI, almost forgot to mention we setup a second user profile on the computer for them. Thanks in advance!