Hello riley and welcome to Seven Forums.
I think the easiest thing to do is create a guest account. People using the guest account can't install software or hardware, change settings, create a password, or access
your files but you (as the administrator) can turn the account on or off as needed.
Guest Account - Turn On or Off
You can also create a secure guest account that could limit the user's access to your network, shutting down the system, etc.
Secure Guest Account
If I've misunderstood your question I sincerely apologize.