Locking Down a Roku

Is there a way to prevent a general user from making any changes to settings on a Roku player? Ideally, i'd like to deploy these devices to locations where they can only run the script that the admin installs on it, and cannot add channels, change from wired to wifi, or make any other changes.