How to create a windows account with the most limited rights?

Question

System administration

The task arose to sometimes show our clients the functionality of certain software by providing an RDP connection to our server with a separate virtual machine.
Because the circle of such persons is unlimited, a limited account is needed so that the client cannot go where it is not necessary or at least cannot harm neighboring virtual machines or the office where our server is located. Ideally, only allowed programs should run and the external ip of the office should not light
up. How to implement this from scratch?

Answer 1

Give a separate virtual machine without access to the office network, recreating it every time for a new client.
The requirement "so that the IP does not stick out" can be implemented through TOR.

Answer 2

Launching the program in a terminal without a desktop.