Or you could make a ticket filter to reject tickets from persons not having an email address of your organization and auto-add members of your LDAP to an organization automatically - won't help with registrations since they would still be possible, but you could then easily find all the people not in organization and delete them every x weeks or so.