(I post "an answer" because I have not enough reputation to comment above. However, this information is important.)
Tested: Windows 8.1
The answer given by nhinkle above works well. However, it does not prevent you from opening a command prompt and navigate to the drives manually ('' can be copy and pasted). Starting a JPG file on the other drive opens the image viewer.
You can disable the command prompt via "User Configuration\Administrative Templates\System", but I haven't found a way using the MMC to allow the command prompt while restricting it from navigating around.
There is a workaround, by accessing the "Security" "Properties" (right click) of the drive/root folder(s) (like D:), adding a dedicated line for the user account in question and check "Refused" "[x] Total Control" (might be labeled differently, I use a non-EN Windows version).