Restrictions

The most important options in this tab:

Prohibit use of USB-devices
If this option is enabled users won't be able to work with selected USB-devices. A message will be displayed in the tray about the impossibility of using device, and also event will be generated if enabled.

Whitelist of USB-devices
You can set exceptions when blocking USB devices, in this case you need to add the USB-path of device (each per new line).
You can find these values in the "File operations" report (when copying files to a flash drive), as well as in the "Events: user" report (for flash drive insertion / device blocking events, but only in case these events are enabled at this settings tab).
List example:

USB\VID_0952&PID_11D4\MSFT2546493643654
USB\VID_AD07&PID_0316\A117000036428772623

Ignore sticky keys (activity imitation)
When you enable this option and hold down a key on the keyboard for a long time, its sticking will ignored, this prevents the ability to simulate an activity.

"Black" and "white" lists of applications
You can specify application list for the prohibition/permission of execution, respectively (option is only for Windows!).
Each application should be specified from a new line and represent either the full path to the executable file, or only the exe file itself without a path, or application description.
You can use environment variables.
Examples:

%WinDir%\Syswow64\regedit.exe
bad_app.exe
Microsoft Office Word

If the application should be forbidden, a tray message will appear on the user's machine, and the application will be closed.
It's important to note that only applications with windows fall under control, but hidden system applications - do not!

Prevent commands execution in Linux terminal
You must specify a list of commands (each on a new line) that will be prohibited from running in the graphical Linux terminal.
There is no support for non-graphical sessions (console) in this case!
See also "Events" tab group.
Examples:

sudo vi -c ':!/bin/sh' /dev/null
sudo openvpn --config "$LFILE"
nc -l -p $LPORT -e /bin/sh

See also computer settings tab "Restrictions"