If you wish to prevent users from undocking their laptop:
1. Use the appropriate Group Policy at
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Right Assignment.
2. Remove the user or group from the Remove computer from docking station right.
3. When the user next logs, they will NOT have the right to Eject PC.