How to control what network Domain Member devices can access?

I would like to prevent the Domain Users from disconnecting Domain Member Computers from the LAN and connecting them to the internet via either the NIC or wireless usb adapter.