I had a program at work called Empower by Magna Software. It would allow "guests" to the PC to log on, but the "guests" could not see certain files that the "administrator" had "locked". "Guests" COULD run applications, even if they were "locked". You might give this package a try.