Xecure
you can do a lot of the requirements by properly selecting groups to which the user belongs to (a current user can list the group they belong to using the command ‘groups’).
E.g. definitely remove the restricted-user from ‘sudo’.
As sybok mentions, controlling/assigning groups is the key for limiting access to a user account.
Complementing sybok’s answer, for an easy gui way to manage them you can use antiX User Manager program. You can add/remove groups, and you can change group membership for each user.
antiX Live system enthusiast.
General Live Boot Parameters for antiX.