You could try Active directory policies (GPO's) to establish this (lockdown the desktop, no access to DOS/add remove programs, screen settings, etc. etc.), but it has to be said that when a user is a local admin, he can do a lot of damage, without you doing much about it.....
If you really want...