You need to lock the interface:
In Policy Manager: choose 'Endpoint Security Common' then 'Options'.
Select whichever policy you're using and change the options under 'Client Interface Mode' to lock the UI and add a password.
Thanks, I know that's an option. But I prefer Windows UAC. That's how the Viruscan Enterprise works. Non admin users can open the Viruscan console but they can't change any settings(all greyed out) while admin users can open the console and change the settings.