How do I restrict users from joing member servers to my domain

I am trying to restrict a group of non administrative users from
joining member servers to my domain. These non administrative users
should continue to have rights to join Windows XP SP 2 machines
(clients) to the domain.

In summary, I am trying to restrict new servers from being joined to
the domain