Hi
@dlrider,
You can force such lockdown by setting up Policies in RAS Console.
Policies can be assigned to specified user or AD Security Group. In a nutshell you will be able to specify which settings this group/user can modify, and which can not.
Please review
this KB article that will guide you through policy deploying process. Hope this will help you to achieve your goal.
Have a nice day!