how to deny clients to restore files, reconfigure veb or see repo?
It’s not possible in standalone VEB installation.
do i need to configure ntfs acl?
is it possible to hide veb from user?
You can close tray application manually (or move it to less important aka hidden part of tray apps).
By the way, Veeam Endpoint Backup for LabTech plug-in
can solve all these issues. You can centrally manage all the clients in one place and set e the managed mode (disable end user access).