Prevent users from accessing EAC

Hey Team

How do I prevent standard user accounts from logging onto https://mail.server.com/ecp ? I realize they cant do much but still is there a way to prevent them from accessing ECP from any location?

Thanks,

Robert

Robert