ENGDOCS-2230 (#20996)

* ENGDOCS-2230

* add release highlight

* rollback release note

content/manuals/security/for-admins/hardened-desktop/settings-management/_index.md

@@ -47,6 +47,7 @@ Using the `admin-settings.json` file, admins can:
 - Turn off Docker Scout SBOM indexing
 - Turn off beta and experimental features
 - Turn off Docker Desktop's onboarding survey
+- Control whether developers can use the Docker terminal
 - Control the file sharing implementation for your developers on macOS
 - Specify which paths your developers can add file shares to
 - Configure Air-Gapped Containers

content/manuals/security/for-admins/hardened-desktop/settings-management/configure.md

@@ -184,6 +184,10 @@ The following `admin-settings.json` code and table provides an example of the re
   "displayedOnboarding": {
     "locked": true,
     "value": true
+  },
+  "desktopTerminalEnabled": {
+    "locked": false,
+    "value": false
   }
 }
 ```
@@ -219,7 +223,7 @@ The following `admin-settings.json` code and table provides an example of the re
 | `useVirtualizationFrameworkRosetta`|  macOS only | If `value` is set to `true`, Docker Desktop turns on Rosetta to accelerate x86_64/amd64 binary emulation on Apple Silicon. Note: This also automatically enables `Use Virtualization framework`. |
 | `useGrpcfuse` | macOS only | If `value` is set to `true`, gRPC Fuse is set as the file sharing mechanism. |
 | `displayedOnboarding` |  | If `value` is set to `true`, the onboarding survey will not be displayed to new users. Setting `value` to `false` has no effect. |
-
+| `desktopTerminalEnabled` |  | If `value` is set to `false`, developers cannot use the Docker terminal to interact with the host machine and execute commands directly from Docker Desktop. |
 
 ### Step three: Re-launch Docker Desktop