to prevent changes on windows components:
must have an administrator account.
Open the Run tab and type gpedit.msc
In the window that opens, go to User Configurations > Administrative Templates > Control Panel > Personalization.
can disable prevent user to make any change on the component you choose here.
see the attachment.