Limit the privileges of user accounts so that only authorized administrators can perform Winlogon helper changes.