Stop users from disabling password for sleep or screen saver?

Org policy requires all workstations to lock after a period of inactivity, to be locked when unattended, and that a password is required to get back in again. Someone tried to address this by simply hiding the Security & Privacy control panel, as there isn't much else they could use that panel for. I'd prefer to simply grey that option out for users, so the panel is still there, so admin personnel could still access it. Where would I look for the ability to do that?

You can do that with OS X server but that would mean running server just to allow Profile Management