Tim, here is what you need to do to lock down the clients.
1. Click Policies
2. Right click, edit the policy that you are using
3. Select File System Auto Protect
4. Click on the Padlock Icons to lock the settings
This lock can be also be found on Internet, MS Outlook Mail, and Truscan Proactive Threat Scans.
Cheers,
Thomas