I have three virtual servers. ispconifig is installed on all three and all three offer web/mail/etc... services. Only on one server is the web interface installed and available. From that interface, I control all three servers.
Now my "control" VM also serves services, but that is optional: you decide on what servers clients run their stuff, so just never assign the control vm.
Hope this helps,