A friend (Hi Rob!) emailed me this links about a (free) Microsoft product – SteadyState – that allows you to manage shared Windows PCs, such as kiosk PCs or ones used by children.
See Parents take control with SteadyState – Security – Technology – theage.com.au
I guess it’s the (great?) grandchild of something like Apple’s old At Ease interface.