Setting User Rights

I want to make a policy (user rites) on my local machine, which is a member of a workgroup. Such that when Users ‘X’ Logs on to the machine,
1) he does not have access or can’t see the C drive.
2)He can’t install any sort of software on the machine.
3)And he can’t not run certain programes on the machine, like MSN,MS OutLook etc.

Any help regarding this would be highly appretiated.
Have been trying to do this for a long time, and google has not been so helpful to me in this regards, prolly i am not asking google the right question. So please help me out here.

Thanks in advance
Saaed.