Lock out certain features

We are deploying T46 and T42 Yealink phones in our company. Is there a way to lock out users from certain features of the phone? For example, on the T46 we are installing a customized image when auto provisioned at deployment. I would like to be able to remove the capability for the user to go in and change that image from their phone. I hope that makes sense.

Thanks!