For Single-Site Gold Edition
     

You need to ensure that users on the LAN do not add malicious TDL code to bypass user restrictions – this can be controlled.

You need to ensure that some customisation must be run by all users – this can be controlled.

The deployment of this custom TDL (and changes to these TDLs) can be automated and centrally managed, instead of needing to copy these to each PC and making changes to the configuration files