You can deny users access to Spybot S&D's configuration by defining the Settings password. See section Generic client settings in the web interface of Spybot S&D Update and Configuration Server. After this the user is prompted for this password before he or she can change Spybot S&D's configuration.