The easiest way would be to assign all your Control objects (like Pots, PushButtons, etc.) the same level of Security Level (if you go into the properties of these objects you'll see this setting).
Then, for the "view only" stations, have all the users log on with a Security level of lesser than this, i.e., give their accounts the appropriate security level. This way, they will not be able to change any settings -- they will see a "stop" symbol when they move the cursor on the object. You will have to copy the Lookout.sec file to all machines. See Online help on deploying Clients.
Also, this way, you don't have to maintain separate versions of your Client process for these "view only" stations.
Hope this helps.
Khalid 🙂