Disable other DC Agent Tray Icon Options

Disable other DC Agent Tray Icon Options

Is there a way to disable the View Logon Reports or at least limit them to that machine only? Currently I can only turn off Apply Config, Scan and Upload Patch or Inventory Details.   We do not want other users knowing when other systems are logged into or out of, but turning off the Tray Icon alltogether seems to be the only other way... we actually would like the exact opposite...
 
Keep icon visiable,
Allow Apply Changes
Allow Scan Upload Patch Details
Allow Scan Upload Inventory Details
Disable View Agent Logs
Disable (or limit to current machine only or current Custom Group the machine belongs to) Logon User Reports
 
Is there a way to start the DC Agent as a different user  so we can write protect the agent logs from the currently logged in user thus allowing the logs to be added to by the agent, but not tampered with by the user?

                New to ADSelfService Plus?