The Lock-Down Manager is used to control the users who have access to the Display Wizards, application wizards, and configuration of the Advanced components. The concept is simple: an administrator identifies a web application, enables the Lock-Down feature for that web application, and then identifies the group(s) that has access to the wizards and configurations. Site administrators who are not members of the identified group(s) can still view and place v11 components on a page, but they cannot configure the components.
Lock-Down is not enabled by default. When Lock-Down is not enabled in a web application, all site administrators have access to use the application wizards and can configure v11 components via the Display Wizards and web part menu.
When Lock-Down is enabled for a web application, site administrators who do not have access to the Display Wizards will not see “Display Wizard” as an option on the web part menu for any Basic components and will not be able to access the configuration of Advanced components. They will see the application wizards listed on the Site Settings page but if they try to access an application wizard, an error message will be displayed, stating that the user does not have the necessary access to the wizard.
Lock-Down controls access to the Display Wizards, the application wizards, and the web part menus for Advanced components; you cannot use it to limit access to the Display Wizards but not the application wizards, or vice versa.
Before you begin to use the Lock-Down Manager, you should create and populate the SharePoint groups you want to use to define who has access to the wizards in web application. In addition, Central Configuration must be enabled.