I have deployed, created portal sites using administrator account in my machine.I have also created Team sites in the sharepoint server using the same
administrator account.
I have two types of intranet users in my organisation. Most of them logged in as a domain users. Rest of the users have their separate domain where they are the domain controller and they logged in as administrator.


Network Details

Domain 1: Domain 1: Domain 2: Domain 3:
Machine1 (Domain users) Machine1(domain controller) Machine1(domain controller) Machine1(domain controller)
Machine2 (Domain users)
Machine3 (Domain users)
Machine4 (Domain users)
Machine5 (Domain users)
..................
..................
..................
..................
Machine78(Share Point server machine)


Iam able to control the access of the domain users by assigning them as the 'Reader' group but these domain controllers are getting complete access to the share point server(administrator group). They are able to control the whole sharepoint portal sites.
How can i restrict the access to those domain controllers also?