Larry, which version you are running?
In 4.5 and 5, modify the Agent UI control rule by unchecking "Allow user to modify agent security settings" or "Allow user interaction".
In 4.0.X you could take okclient.exe out of startup.
They could still stop it other ways but not as easily...
Tom