How to limit access to the file system as much as possible?

Question

Access rights

By default, a user and even a guest in Windows 2008 can create folders and files under the C: root, view the contents of the Windows folder, and so on.
It is necessary to restrict access so that he can create something only in his home directory, and even better, so that he cannot view anything extra.

Answer 1

In the security settings for drive C (Properties -> Security), delete the Authenticated Users object. For him, by default, the rights to create folders are set.

Answer 2

By default, the user and even the guest in Windows 2008 can create folders and files in the C root:

Are you sure you're not confusing anything?

view the contents of the Windows folder, etc.

Let him look. There is nothing special there.
By default, a regular user can only write to the home directory.