So basically if I implement this limitations user will not see the applications on Start menu I have banned him from?
Also how will prevent him from seeing the Control Panel, COmputer, Network and other buttons that are also on start menu?
So the end result I would like is just like on screenshot I have supplied. User can see 3-4 apps he is working in and that's it. No Control Panel, no Computer, no search field or anything other than those 3-4 applications.