My remote policy is setup to NOT show the icon to the users

But they all see it anyway (I just give up on getting this to work and
judging from the list of other complaints about this it seems it's just

However, if you right-click on it, you cannot shutdown the agent.

NOT that i want it to be shutdown, I just don't see an option in the
policy to tell it that the users cannot shut it down.

So where's it getting this setting from?