2012R2 server RDP - Lockdown user desktop using GPO and ASP

We have 2012r2 server to replace a 2003 server. We have RDP endusers that access the server. I need the enduser desktop locked down. We have the gpos defined from the 2003 server and the asp definitions. We need this same environment in place on the 2012r2. I need someone who has experience locking down 2012r2 and can do this efficiently. I am ready for someone to teamviewer in immediately and start now. We need these features: - Logical partition N: apps/data drive (on server) - user has rdp config on the server - User desktop locked down using Group Policy (we have the 2003 GPO and ASP docs) - profiles setup as roaming and are redirected to another partition so as not to fill up primary partition - Clients are parts of ASP organizational Unit to which lockdown GPO is applied - ASP users are limited to launching the application. - users have access/visibility to only their 'home' directory - They are restricted from running any other tool, browser, control panel, prompt etc. - Users are restricted from seeing any other logicals drives or printer, except for their home own - User Accounts are managed using active directory. - Groups are setup to manage security and directory access. - The user setup procedure consists of establishing the user name password, and applying user to appropriate security/client groups and assigning to the appropriate ASP OU.