Terminal Service Plus

I am new to TSPlus and it's looking very promising. However... I was very surprised to find my users able to issue restart/shutdown commands on the "terminal server". I have now locked this down via group policy, but wondered if there were any other recommendations around "securing" the terminal ser...