How to restrict normal ssh user to become root ?

["J. Bakshi" <bakshi12@gmail.com>]

Hello list,

How can I prevent general ssh users not to have su or sudo power ?
Just they know the root password by any chance....
In the remote box remote root login is disable and one can only
login as normal user and then need to do su to get root access. Only few
users know root password. How can I prevent the other login to use su / sudo
even they know root password by any means ?

Thanks