There really isn't any way to stop the user from registering the server.
You could run a job that KILLs spids by host name (the machine name), but EM automatically reconnects, so that's no good.
If you don't use SQL Logins, you could change the server's authentication mode to Windows Only.
Why can't you change the sa password? That's probably the only way to achieve your goal.