Some components of Xfce have support for kiosk mode, this can be enabled by creating and modifying the system kioskrc file.

  ${sysconfdir}/xdg/xfce4/kiosk/kioskrc.

[xfce4-panel]
CustomizePanel=%powerusers,foo

• CustomizePanel

This allows only users in the group powerusers and the user foo to customize their panels.

[xfce4-session]
CustomizeSplash=NONE
CustomizeChooser=NONE
CustomizeLogout=NONE
CustomizeCompatibility=%wheel
Shutdown=%wheel
CustomizeSecurity=NONE

This allows all users to change their splash, chooser and logout settings, but allows only users in the group wheel to customize the compatibility settings and shutdown the system. No one will be allowed to adjust the security settings.

The session manager supports the following KIOSK capabilities:

• CustomizeSplash

Whether or not the user is allowed to customize the splash screen.

• CustomizeChooser

Whether or not the user is allowed to customize the session chooser settings.

• CustomizeLogout

Whether or not the user is allowed to customize the logout settings.

• CustomizeCompatibility

Whether or not the user is allowed to customize the compatibility settings (KDE/Gnome compat)