General Generic restrictions Disable Window Manager context menu (Alt-F3) The Window Manager context menu is normally shown when Alt-F3 is pressed or when the menu button on the window frame is pressed. Disable Bookmarks Disable Bookmarks in all applications. Disable all tasks and applications that require root access In multi-user environments the users normally do not know the root password; in such a case, it may be desirable to use this option to remove the tasks and applications from the menus that the users cannot use. Disable access to a command shell In an environment where the desktop is dedicated to a defined set of tasks it may be desirable to disable access to a command shell to prevent users from engaging in tasks that were not intended or authorized; hence, it is strongly recommended to disable access to a command shell if the desktop is to act as a public terminal. Disable Logout option This prevents the user from logging out. To make this option effective it is important to ensure that key-combinations to terminate the X-server, such as Alt-Ctrl-Backspace, are disabled in the configuration of the X-server. Disable Lock Screen option When the desktop is to act as a public terminal or is to be shared by different users it may be desirable to prevent locking of the screen to ensure that the system remains accessible if a user leaves the terminal. Disable "Run Command" option (Alt-F2) The "Run Command" option can normally be used to execute arbitrary commands; however, when access to a command shell is restricted only applications and services defined by a .desktop file can be started this way. Disabling "Run Command" here hides the option completely. Disable toolbar moving Normally toolbars in applications can be moved around; when this option is chosen all toolbars are fixed in their original positions. Disable execution of arbitrary .desktop files. This option defines whether users may execute .desktop files that are not part of the system-wide desktop icons, KDE menu, registered services or autostart services. When access to a command shell is restricted it is recommended to to disable the execution of arbitrary .desktop files as well since such .desktop files can be used to circumvent the command shell restriction. Disable starting of a second X session. KDM has the possibility to login a second user in parallel to the current session. Note that this can also be configured as part of the KDM settings in which case the setting here should be left enabled. Disable input line history If a single account is used by multiple people it may be desirable to disable the input line history out of privacy considerations. Desktop Icons Desktop Icons are provided by "kdesktop". Lock down Desktop Settings When the desktop settings are locked down the user can no longer change how the desktop behaves or look like. This does not affect the ability to add new files or shortcuts to the desktop. Disable context menus When checked the user will no longer get any context menu. Normally the user can get a context menu by clicking with the right mouse button. Lock down all Desktop icons When checked the user will not be able to remove or edit any existing icon or file on the Desktop or add any new icon or file. Add additional vendor specific icons When this option is checked users will get additional icons copied to their Desktop when they first log in. These icons do not appear in the preview. Desktop Background Set up the Desktop Background also known as Wallpaper. Lock down Desktop Background Settings When the desktop background settings are locked down the user can no longer change them. Screen Saver Set up Screen Saver Lock down Screen Saver Settings When the Screen Saver settings are locked down the user can no longer change them. Disable OpenGL-based Screen Savers OpenGL-based screen savers may cause problems on systems without decent OpenGL support; with this option all such screensavers can be disabled. Discreet Screen Savers Only Some screensavers do not hide the complete screen content and may leave possible sensitive information visible. This option disables all such screensavers and only enables those screensavers that completely hide the original content of the screen. KDE Menu The KDE Application menu Disable all tasks and applications that require root access This option disables all menu items that require root access and that will ask the user for the root password. Disable menu editing This disables the menu-option to edit the KDE Application Menu. When disabled, users will no longer be able to make changes to their personal application menu. Theming Set up of Fonts, Colors and Style Lock down Style Settings When the Style settings are locked down the user can no longer change them. Lock down Color Settings When the Color settings are locked down the user can no longer change them. Lock down Font Settings When the Font settings are locked down the user can no longer change them. Lock down Window Decoration Settings When the Window Decoration settings are locked down the user can no longer change them. Panel The KDE panel "kicker" is normally found at the bottom of the screen. Lock down panel This option can be used to lock down the panel. The user will then no longer be able to add, remove or change any of the permanent panel items. Disable Context Menus This option disables the context menus that one normally gets when pressing the right mouse button in the panel. Network Proxy Set up of Network Proxy settings Lock down Proxy Settings When the Proxy settings are locked down the user can no longer change them. Konqueror Konqueror is a combined web- and filebrowser. Disable Properties in context menu This option can be used to disable the <i>Properties</i> option in the context menu for files. Disable Open With action This option can be used to disable the <i>Open With</i> menu option. Disable Open In New Tab action This option can be used to disable the <i>Open In New Tab</i> menu option. Disable file-browsing outside home directory This option can be used to prevent the user from browsing the file system outside his or her own home directory. Menu Actions Common menu actions found in applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. See also <i>Open Recent</i> Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. See also <i>Print Preview</i> Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. Disable File -> %action This option can be used to remove the <i>File -> %action</i> menu-option from all applications. This option has been added for completeness. Usually the application can be terminated via the window manager as well. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable Edit -> %action This option can be used to remove the <i>Edit -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable View -> %action This option can be used to remove the <i>View -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Go -> %action This option can be used to remove the <i>Go -> %action</i> menu-option from all applications. Disable Bookmarks This option can be used to completely disable bookmarks in all applications. Disable Bookmarks -> %action This option can be used to prevent users from creating new bookmarks. Disable Bookmarks -> %action This option can be used to prevent users from editing bookmarks. Disable Tools -> %action This option can be used to remove the <i>Tools -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> Configure <Application> This option can be used to remove the <i>Settings -> Configure &lt;Application&gt;</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Settings -> %action This option can be used to remove the <i>Settings -> %action</i> menu-option from all applications. Disable Help You can use this to completely disable the help menu Disable Help -> <Application> Handbook This option can be used to remove the <i>Help -> &lt;Application&gt; Handbook</i> menu-option from all applications. Disable Help -> %action This option can be used to remove the <i>Help -> %action</i> menu-option from all applications. Disable Help -> %action This option can be used to remove the <i>Help -> %action</i> menu-option from all applications. Disable Help -> About <Application> This option can be used to remove the <i>Help -> About &lt;Application&gt;</i> menu-option from all applications. Disable Help -> %action This option can be used to remove the <i>Help -> %action</i> menu-option from all applications. Desktop Sharing Remote Desktop Sharing Lock down Desktop Sharing Settings When the setting for remote desktop sharing are locked down the user can no longer change them. File Associations Configure the applications used for opening files. Lock down File Associations Settings When the setting for file associations are locked down the user can no longer change the default applications used for opening files.