Disable AutoLogon for certain users

We want our helpdesk to be able to view passwords only, and not be able to launch AutoLogon. How do we prevent those users from using AutoLogon?