How do I restrict Shutdown for TS users?

This is my first Terminal Services install (application mode). When the users connect it works great. What I don’t like is that they can access the ShutDown button of the server. How Do I restrict this function?