Windows User rights

Hi all,
I need to create a script to modify the user-rights on several windows computers (I have admin rights on those, of course!).
What I need is:

1) Have one Admin:
- min 10 chars (inc.specila) login
- can do everything

2) Have one User:
- icon on desktop for quick start/login
- cannot modify any hardware or operating system setting
- Network: off
- Camera: off
- USBs: limited
- Other ports: off
- BLE: off
- WiFi: off
- Desktop background config (colour, wallpaper, resolution, etc): off
- Games: off
- Access to "regedit", "cmd" and "powershell": off
- Install programs: off
- Mouse changes: off
- Keyboard changes: off
- Touchscreen config: == YES ==
- Access to any folder (folder explorer): off
- Access to an exchange folder: == YES == (this means, the user can create and delete anything within this folder; it is like his personal folder)