This is how I handled it.
I wanted to allow non-students to use it, but block students from messing with it.
When I configured the settings for the "group" where I put the student computers, I put a password on "General Program Access" so they can't even open up the main screen for Avast!. For the other groups, in their respective configuration settings, I left the "General Program Access" box unchecked.