Can OS X be configured to only allow administrator users access to shutdown tools?
You can use Workgroup Manager and OS X's managed preferences (MCX) to restrict access to the Restart and Shut Down commands in the Finder:



..then use the Accounts prefpane to show or hide the Restart, Sleep, and Shut Down buttons at the loginwindow: