How to restrict user access to disks on Windows 10?

Question

PHP

Hello! I ask you to help in a difficult situation, there are many PCs that children from 7 to 18 years old are engaged in. Our facility has recently opened. The training began and at the same time the children began to clog computers, set passwords, installed toys somewhere, changed the wallpaper, launched a batch file that multiplies a bunch of folders and subfolders, and so on.
I started to solve the problem, put a password on the main account, found the Family and others section in the WIndows 10 settings. There I created an additional user without a password. In order not to set the password again, in cmd I registered net user "Student" /PasswordChg:No from under the admin. After that, in principle, installing and removing programs and files from under the user Student has already become impossible without entering the password for the main account.
But the question remained with clogging the computer through browsers or creating batch files and other things. Since the user can safely create folders and files on the main drive C:\. How else can you restrict the user, advise, it may be possible to disable the ability to write to disk, or change wallpaper, or something else. The goal is to narrow down the possibilities as much as possible. Leave only the launch of certain programs and the ability to save projects in one folder.
I would be very grateful for any advice :)

Answer 1

in PHP, probably something like this:
By clicking on the link , in SUBSTITUTION you see the desired result. This is a replacement.