Locking Down a Roku

Is there a way to prevent a general user from making any changes to settings on a Roku player? Ideally, i’d like to deploy these devices to locations where they can only run the script that the admin installs on it, and cannot add channels, change from wired to wifi, or make any other changes.

Yes. This would be a nice feature. My autistic son keeps wiping out ALL the saved channels. So, we have to start over every time.