Can OS X be configured to only allow administrator users access to shutdown tools? Setting aside pushing a physical power button, can I prevent non-administrator users from initiating a software shutdown?

In Mac OS X Lion all users are allowed to shut down the workstation. How do I allow only the administrator to shut down the workstation?
You can use Workgroup Manager and OS X's managed preferences (MCX) to restrict access to the Restart and Shut Down commands in the Finder:



..then use the Accounts prefpane to show or hide the Restart, Sleep, and Shut Down buttons at the loginwindow: