Limit User to Run a Single Application

We have a user who needs to access our server using vnc. We would like to limit this user to run a single application when they log in. When the user exit’s the application, we want to automatically log them out. We also do not want them to be able to access the files system using My Computer. How can we accomplish this running Windows Server 2003?