We recommend that you limit the actions of users on a shared computer by restricting the profiles for shared user accounts as discussed in Configuring the Shared User Profile. Through the use of shared user accounts, administrators can ensure that users will not be able to access any administrative tools and privileges that may allow them to make unwanted changes to the operating system or to the programs installed on the shared computer.
There are applications that you may want to allow users to run that will require enhanced access to the shared computer.