There appears to be no way to lock out WPS. To allow or disallow WPS should be an admin permission. Anyone with access to the physical box could create a security risk. Visitors, cleaning personnel, and others could with the correct knowledge create a registered device on the wireless network, and at some later time from a location outside the home or office access the network. This is a major security hole. We often host large parties, and it is not possible to place the router behind locked doors.
Even the possible work-a-round to use Access Control is not sufficient, on page:
Advanced > Security > Access Control
What one would need is a third general rule that would be:
Block all new wireless devices from connecting.
And BTW, the header at the top of the page of this group is poorly written:
Access Rule: This is a general rule. You can also allow or block individual devices.
There are two general rules to choose from, so therefore the line should read:
Access Rules: These are general rules. You can also allow or block individual devices.
(Firmware v1.0.2.62)
Comments have been turned off for this idea