Are there any common designs or best practices for keeping users confined to your .net application (unless of course they have access to get out of the application)?
This is very dependent on which kind of application you are using, but the term to feed google is "Kiosk-Mode".