How to give the necessary rights to the RDP user?

Question

Remote access

Windows Server 2012 R2.
The task is as follows:
1) Give the user access to one directory + subdirectories.
2) Grant access to run multiple programs.
3) Prohibit viewing information about the system, editing any parameters in the control panel, etc.
That is, to create a working environment for working with the code, the database.
I would be grateful for links to manuals, if any.

Answer 1

Give the user simple user rights. Usually this is enough in 95% of cases.
1. Rights to directories are assigned in a standard way.
2. There are appropriate settings in group policies.
3. As far as I remember, if you set the appropriate settings through group policies, then the user himself will not be able to change them.
In general, point 3 is doubtful. I don't know why it would be really necessary.
In paragraph 2, there are also big doubts - maybe it's easier not to install on the server those programs that cannot be run? With limited rights by standard means, the user will not be able to damage the system.