What is the easiest way to lock an lower level administrator from using the PC via Active Directory?

When disabling a computer what else can be done with out having to block the IP address or MAC to make sure the PC does not get on the network and or changed the computer name?

[ reply ]