Creating a special user account

Hi,

I am looking into creating a domain account that have very limited access.

The user only can run Microsoft Office installed on the workstation.
The user can login from any workstation.
The user cannot save into the workstation. He/she can only save to their home folder which is located in a shared folder in the server.
There must also be a printer setup for them to print.

Here one clue :

Roaming profiles

Any suggestions are most welcomed.