In Vista, there is a "Windows Feature" called "GroupPolicy Preferences CSE" after you install the CSE extension set.

Is there a way to prevent a domain user/computer from seeing or changing this feature?

We don't want them to turn off or remove CSE because we are using it for several Group Policy prefernces.

There is an option to prevent access to all the Windows Features, but we don't wish to use it.