I have a friend who’s machine I maintain cause he’s at a age where he can’t do it himself, but he keeps getting into the setting and breaking things I then have to fix them. I need to be able to lock him out of any edit modes and all the Plasma system settings.
Plasma 6.3.5
Hi - what methods are being used to get into the settings? Ex. if he keeps accidentally wandering into System Settings from the Application Launcher, you could remove that entry from the menu using the Menu Editor? Or, if it’s an issue of system tray icons looking too interesting, maybe those could be hidden or disabled?
There are also options like the Kiosk framework, if you need to be really thorough 
Kiosk - Simple configuration management for large deployment | Developer
I suppose I could just remove the one entry, disable kwin from the desktop, and hide the various systray icons that he could use to get into the system settings.
Idea for those items like Network you might want to think about making them spawn a independent window when launched from the systray so as not to spawn the entire system settings.
Hi! I have a very similar problem with the laptop of my parents. Unfortunately they keep changing settings on the desktop by accident (right click → edit mode). I read the introduction of the Kiosk mode and it seems the right way to approach things, however what I do not yet understand:
If I use Kiosk mode to lock things down, they stay as they were, ok. But then, if for example if I want to add a widget to the desktop afterwards, how do I proceed? I’d have to “unlock” the DE, do the changes as the user, then relock it again?
Or otherwise: How is the workflow with Kioskmode, when an admin wants to change settings for a machine? Is there some best practice to follow?
What if you set the kde config files in ~/.config to read-only.
Update: actually this seems to be a thing,