How do I limit the number of cores a user can access on a large shared windows 2019 server?

I have a 64-core Windows 2019 Server. Several of my user's have badly written programs that never envisioned being on a shared machine, and use 100% CPU on all cores while doing no useful work with them. They're impacting all users, and as a form of damage control, I'd like to have at most 4 cores available to each logged in user (or 4 cores available to each app/process would be fine too). Is there a way to implement this on Windows Server 2019?