限制在机房计算机上只能运行指定的程序，从而防止学生随意安装运行游戏(Confined to the computer room, only designated programs can be run, thus preventing students from installing and running games at will)