Hi ,
1.User must not be an administrator.
Create a local user account. By default your local user account is set as a limited account, meaning it cannot install applications or make administrative changes to the machine.
2.Only selected applications should be visible with full access (except uninstallation) to the user.
There is no build-in way could achieve this goal. You might concern to use some third-party tool to achieve this goal.
3.Only one folder should be assigned to the user for saving files and the user should not be able to access any other drive or folder.
You can change folder permissions to restrict user access to folders.
Using those permissions, you can control whether a user can access a folder and its content or not.
Find the folder you want to restrict and open its Properties from the right-click menu. In the Properties window, go to the "Security" tab and see if the user account you want to restrict is listed under the "Group or user name" section. If it is not , add the account.
After changing the folder permission, the target user can no longer access the target folder. As the picture below:
For more details you could refer to the following article:
https://windowsloop.com/restrict-user-access-to-folders-windows/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
4.The user must not be able to make any changes in the computer.
There is no build-in way could achieve this goal. Some basic operations can still be performed like modifying input method editor. The local user just cannot make administrative changes to the machine.
---Please Accept as answer if the reply is helpful---
Best Regards,
Candy