It can be done with the API, but since you're asking about it, it's probably not going to be the easiest thing to learn.
You might buy a lockdown tool and host a web app in service using OpenRasta. That way you could fire up browsers and also kill them off as well as not have to deal with IIS at all.
IF you're just playing around and have an old XP box, you could try some of the old free stuff to see what they do and what you would need to do. I wrote one of these from scratch back in the 90s using win32 API for IE4, IE5, I don't think IE6 even existed yet. I'm sure you can still do that same thing in win8, win7, but there's alot more to do than there was and making it secure is quite difficult and easy to mess up.
http://www.techrepublic.com/article/alternatives-to-windows-standard-desktop-lockdown-features/5034950
Steady State is free
https://www.microsoft.com/en-us/download/details.aspx?id=24373
discontinued, but still out there for XP
http://download.cnet.com/Windows-SteadyState/3000-18512_4-10977409.html
https://www.microsoft.com/en-us/download/details.aspx?id=4310
Windows SteadyState (formerly Shared Computer Toolkit) is a discontinued https://en.wikipedia.org/wiki/Freeware tool developed by https://en.wikipedia.org/wiki/Microsoft
that gives administrators enhanced options for configuring shared
computers, such as hard drive protection and advanced user management.
It is primarily designed for use on computers shared by many people,
such as https://en.wikipedia.org/wiki/Internet_cafes, https://en.wikipedia.org/wiki/Schools, https://en.wikipedia.org/wiki/Libraries, etc.
SteadyState was available until December 31, 2025 free of charge from Microsoft for computers running https://en.wikipedia.org/wiki/Windows_XP and https://en.wikipedia.org/wiki/Windows_Vista. A 64-bit version was never available. Windows SteadyState was incompatible with https://en.wikipedia.org/wiki/Windows_7.
https://en.wikipedia.org/wiki/SteadyState
http://www.windows7download.com/free-win7-desktop-lockdown/