Windows Agent should have a password so standard users can't edit on it

I noticed that the Windows agent/endpoint can be edited and closed by standard users, which means they can easily bypass the implemented restrictions. It would be much better if only administrators were allowed to access the Windows agent/endpoint.