Restrict exes for domain user on 2003 server (remote desktop)

I have one user who has to log onto a 2003 server inorder to run an specific program that can only be ran on the server.

If there a way I can have the domain user beable to connect to the 2003 with remote desktop then beable to run just that one application?

Just don’t want the user to accidently shut down the server, delete something, change any server settings, etc.

Thanks for any help! This ones got me stumped 🙁