Report Offensive Message

I secure it behind a firewall and require a VPN connection. This means there is a client install for connections outside my firewall, but the VPN client is small.
Has anyone figured out how to disable the shutdown computer option within TS, and only allow logoff, without removing this functionality from the persons normal workstation profile? I use roaming profiles.
Thanks