<< Is there a way to prevent configuration changes to EWB's web server by users? >>
Are you talking about changes to the ewbsrvr.ini file ? If so, then the easiest way is to simply run the web server as a service with the UI turned off (nointeract command-line flag):