Through SQL Server, there isn't anything you can do. Through Active Directory group policy this is possible, however, it does mean you'd have to segment users into who could and could not use EM and create the appropriate structures in Active Directory.
K. Brian Kelley
@kbriankelley