“1) Support for Restricted Profiles: you can keep junior out of your, ah, questionable apps or Web sites. Technically, it means that you can set up separate environments for each user with fine-grained restrictions in the apps that are available in those environments.”