I know VSE and Hips cannot do that and I am pretty sure PA cannot as well. Someone correct me if I am wrong.
The best place to control this is via Group Policy. See the link below.
Best Practice: How to use Group Policy Preferences to Secure Local Administrator Groups