@Merlin, since it is a Windows node I recommend installing the Hyper-V role/addon and on top of that you either have a set limit your SPLA license from the datacenter allows for installing Windows VPS's that you can allocate a specific core/RAM/disk space etc or if unable to go the Windows route then simply do linux based VM's and give the renters access via SSH etc if needed to their VM's.
I personally have most the AA servers running on linux and see much better performance and don't miss paintball map too much

Food for thought if you want to segregate things a bit or simply setup TCAdmin and just give them access to start/stop/File manager all for an extra $15/mo for peace of mind on your side bud through a web panel or if looking to go fully free/cheaper there look into firedaemon fusion web panel (will allow you to assign users access to reboot a specific service on the machine and only that one) and setting up file access via FileZilla Server to give each of your users a FTP account to just their game directory. This way you are not giving out full RDP access leaving you wide open to a lot of issues.
Best of luck!