Lock down client installation

[avastboy]

How do you set it so that users cant mess with settings on their client edition??? this is driving me nuts now cant find it anywhere, checked in on access tasks > default resident sheild but it doesnt lock anything down.