[ActiveDir] Getting better control over DHCP

[Edwin]

Is it possible within a domain on an authorized DHCP server to restrict what machines get a DHCP IP Address?  For example, I want to prevent someone from bringing in an unauthorized laptop and getting an IP Address on the network.  I want it to be so that if the machine is not a part of the domain, it does not get any network connectivity from the DHCP server.   Thanks, Edwin