-how can only deny login to windows for local admins?
-how can deny local admins for access to local clients data?
-how can deny local admins for access to local clients data?