I think that it's related to Bug #47834. You need to use the kiosk mode to not let users shut down the server. IIRC it doesn't work fine in dapper, but is fixed in Edgy. Could you test?
** Also affects: xfce4-session (Ubuntu) Importance: Untriaged Status: Unconfirmed -- Shutdown permissions https://launchpad.net/bugs/59397 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs