Running SLED 11sp3 on a Wyse thin client.

I am trying to lockdown a "Thin Client" device. YaST is currently password protected. I want to only allow "root" to be able to access "More Applications" and "Control Center".
How do I remove/password these applications or menu options. The user will only be able to access items that are on the desktop.