Disable shut down only for domain users.

On XP, how can I disable regular domain users to shutdown? I only want a domain admins to have permission to shut down a pc but not the domain users.