I have noticed that a regular user (with no special permissions) can join their workstation to my windows 4.0 domain. How can this be prevented?