This document describes various settings to make IGEL OS more secure. In general the more of these settings you apply the better endpoint security will be. However, it is up to you to strike a balance between security and enabling your users to do their work. Some settings may even be inappropriate for your use case, e.g. if you use Bluetooth peripherals it does not make sense to disable Bluetooth.
In order to configure more than one thin client, put one or more settings presented here into a Universal Management Suite (UMS) master profile, which you can assign to any number of thin clients, enforcing the security settings as a consequence.
Learn more about using master profiles here.