Secure VPS client + Launcher (Windows policy)

We need someone to quickly create a set of windows policy rules which will 1. Dissallow user access to any files other than the launcher itself, and the desktop. 2. Allow the user to launch an application, and move 4 text files (But never view them) from within launcher application the loads on startup. This should be a simple project for anyone familiar with windows policys via windows server. We will provide a full project outline, consisting of -Access to a VPS running something very similiar to what we want -Photoshop mockups of what we want ours to do (So theres no confusion) -Admin access to a dedicated server running windows.' We need this done VERY quickly, so someone who can make this a priority is preferred. You will need to #1. Be familiar with windows policy rules #2. Be familiar with visual basic, or able to provide us with something we can edit with similiar ease ourselves.