Force logoffs from W2k Servers

I’m running W2k DC’s and NT 4.0 clients. I would like all users who are not domain admins to be logged off nightly. What’s the easiest way to disconnect them so they must log in every morning?