Look at the xdm config files..
http://www.linuxjournal.com/node/6713/printHowever, you may prefer to set these options to None, in which case the shutdown button will not appear at all in the login window
--you need to find the parameters required to edit the change to prevent a remote (XDMP) client shutdown (server) command from running: should be an option in one of your confiuration files either for the desktop manager (kdm, gdm) or the x-server or the client (remote xserver) controls/config files..
A little specific research for your desktop environment will find it