[jitl]

Guacamole is just a go-between. For that sort of OS-integrated lockdown you will need to configure your target server (the box actually running VNC or RDP). No special support on the Guacamole end required.