NETvNext has published an article on how to use Role-Based Administration in System Center Configuration Manager (SCCM) 2012 to isolate desktop administrators so they are not capable of touching servers being managed by SCCM.