Before I start, I'd like to say that what I'll describe here is being done using consumer grade electronics and personal computers, not proper server hardware.
My Windows 10 machine runs a Minecraft Server inside Command Prompt window via a Batch script.
I start the batch script to start the Server then I type stop inside the window to tell Minecraft to save data and stop the server safely, which will subsequently cause the Batch script to stop and the window to close.
The other administrators and I want to be able to control this server remotely, preferably via either SSH or Telnet, whichever is easier to set up. I want to give the admins 100% trust over the Minecraft Server (meaning the shell of the server, during the bat file execution), but no more than that i.e. I don't want them to be allowed to access my Windows PC command-line outside the batch shell, which they should be authorized to interact with via SSH/Telnet as described before.
Hence, a session should look like, for example:
## they connect
> gamemode 0 someone
[timeanddate] timeanddate [Server]: Set gamemode for player someone to survival
> stop
[timeanddate] timeanddate [Server]: Saving chunks... (et cetera)
## session ends, they get disconnected
This means they should not be able to access the Windows CMD except for that specific process, if it exists (sometimes server is down for maintenance and stuff).
Would it be possible to do such a thing? If yes, how?