Hi

you can use impersonation at your application level connection string. and grant access on ALL DB objects for that windows user only. NO other windows authenticated user should have access to database.

Thanks