How can I restrict access to certain Preference Panes?
Parental controls looks like a good answer for my needs.

However, what my work has used for restricting accounts is MCX policies applied through Workgroup Manager.