How do I stop users using cron and at?

See the man page for at.deny and edg-lcfg-cron for details but basically just add to a nodes profile.

cron.allow root edginfo edguser cron.atallow root edginfo edguser

This will create a /etc/at.allow which is all that is needed to stop cron and at being user.