multi-app kiosk

Best way to configure multi-app kiosk PCs with on-premises Active Directory?

I manage several shared computers that use generic accounts and need to be locked down as much as possible. Each machine should provide access to only two or…