Just reserve IP's in the DHCP list to certain MACs, but only allow the pool to be the size of the reserve list... No-one then not on the reserve list should be able to get an IP...
Doesn't though stop people using a manually set IP in the correct range
