Need help creating locked down

Hello-

I am utilizing Windows Server 2019 for the base image of a pool of virtual desktops that I will allow users to log into. I would like to lock these desktops down to be VERY basic in what they allow the user to do. Honestly the only thing I would like to allow is utilizing a browser to get to a single website. I for sure would like to lock down the ability for the user to open RDP sessions or browse the network to file shares. Is there any guidance anyone can provide on what steps I would take specifically to provide this type of user experience on a server?