Is the workstation is part of a domain, you can also use mandatory profiles:
Create a new domain (not local) account, make it guest level so ot can't alter the system significantly, make it roaming, logon and logoff once so that user data is actually created on domain server.
On domain server, go to that user profile dir and rename NTUSER.DAT to NTUSER.MAN .

That's it.