After trying various solutions, including HP's preconfiguration utility, I haven't found anything that allows a complete lockdown of the settings. HP's product allows the administrator to lock certain things (e.g. draft mode, duplex printing) but not everything, so even that doesn't work 100%.