How Can I Prevent Domain Power Users Changing LAN DNS Servers Group Policy

Hi there,

I'm trying to do something very simple via Group Policy (or at least I feel it should be simple) and that is to prevent our domains power users from being able to change thei machines DNS server.  I'm running an SBS 2011 network with default options for the most part.  I would have thought this would be an out-of-the-box configuration but apparently not.

Thanks!

Bob