you could set up manual internal ip address for all computers you want in your network and not have a dhcp server. therefore, anytime a foreign person attaches a network ethernet cable to a computer you don't want to get an internal ip, then that won't happen. there won't be a dhcp server to hand out ips.
the other thing you could do is set up 2003 to hand out ips and include in the scope only those mc addresses you want to give ips for. if your network is big, then that might not be possible.
otherwise, it's kind of hard to do that without some third party software.