Some components of Xfce have support for kiosk mode. This can be enabled by creating and modifying the system kioskrc file found at:
${sysconfdir}/xdg/xfce4/kiosk/kioskrc
By default, ${sysconfdir} points to /etc
[xfce4-panel] CustomizePanel=%powerusers,foo
This allows only users in the group powerusers and the user foo to customize their panels.
[xfce4-session] CustomizeSplash=ALL CustomizeChooser=ALL CustomizeLogout=ALL CustomizeCompatibility=%wheel Shutdown=%wheel CustomizeSecurity=NONE
This allows all users to change their splash, chooser and logout settings, but allows only users in the group wheel to customize the compatibility settings and shutdown the system. No one will be allowed to adjust the security settings.
The session manager supports the following KIOSK capabilities:
Whether or not the user is allowed to customize the splash screen.
Whether or not the user is allowed to customize the session chooser settings.
Whether or not the user is allowed to customize the logout settings.
Whether or not the user is allowed to customize the compatibility settings (KDE/Gnome compat)
[xfdesktop] UserMenu=%wheel CustomizeBackdrop=ALL CustomizeDesktopMenu=%wheel CustomizeWindowlist=NONE CustomizeDesktopIcons=brian
Whether or not to allow user modifications to the desktop menu. If not, xfdesktop will ignore the menu.xml file in ~/.config/xfce4/desktop/ and use the system menu in $sysconfdir/xdg/xfce4/desktop/menu.xml.
Whether or not to allow user modifications to the desktop backdrop. If not, the Backdrop settings panel will be greyed out.
Whether or not to allow user modifications to the desktop menu. This includes showing or hiding application icons, as well as showing or hiding the menu itself.
Whether or not to allow user modifications to the window list. This includes showing or hiding window icons, as well as showing or hiding the menu itself.
Whether or not to allow the user to enable or disable the display of desktop icons, or change their style.