prevent domain admins from access to sql 2000 service without denying them access to the machine

Is it possible to setup a win2003 server with sql 2000 installed (needs to be sql 2000, application is not sql2005 ready) which is a member of a domain, where domain admins can login to the machine but are not able to connect to the sql server running on that machine?

Advice appreciated.