Group policy setting, user restriction, how to do?

Question

Server equipment

Help out.
The bottom line is, there will be a person of 10 remote users, I want to chop off everything superfluous for them.
No administrative elements, so that they could not poke anything, for example
, "computer management", "local security policies", etc.
They will work with 1s.
Now all users are included in two groups "users" and "Remote Desktop Users"
how to restrict their rights?

Answer 1

If this is difficult, you can set the launch of 1C at the start of an RDP session in the user parameters. Then they will immediately start 1s-ka, when it is closed, the terminal session will be disconnected. There will be more questions, write either here or contact me

Answer 2

Again there was a need to remove unnecessary shortcuts.
There is a local Clients group for all its members I would like to remove the administrative elements and the control panel