Mac filtering for Wired machines

Hello everybody,

First, sorry for my english, I am not fluent, and please, answer me with simple words :)

I  want to allow the network ONLY to machines in my domain (known MAC addresses) and prevent users from using a static IP address (Even if I block the DHCP for unknown machines, some smart users use a static IP address to bypass the DHCP mac filtering)

Any idea for how to do that would be very nice.

I got Win 2003/2008/XP/Seven.

thank you very much.