How to correctly restrict a computer user?

Question

System administration

I have a computer with Windows 10. It so happened that for some time I don’t live at home, but the computer is with me and there is one annoying person who really wants to use it sometimes for dotka when I’m not working on it. I feel like I have to resolve in my situation. So...how can I make it so that he can only run his Steam and dotcom...and nothing else? Ideally, so that even the file system could not enter (password entry everywhere), browsers (well, or at least that their contents differed from mine) could not install or delete anything without my permission. I want something like sudo from linux :)

Answer 1

Create a limited account for him, install the necessary applications. Remove read and write access from directories it shouldn't see.
That is, he must have the rights to read the Windows system directories, ProgramFiles, and must have the rights to read and write to his profile and nowhere else.
That is, when he logs in with his password, he will not have access anywhere except his profile, and will be able to run only pre-installed software.

I want something like sudo from linux :)

In windows, this is called UAC and it is enabled by default on all Windows operating systems starting from version 7.