Security Problem SEPM

Dear Forum,

I am a Systemsadministrator and I have the following Problem:

I use SEPM, newest Version, and I created client Packages for manual Installation on Windows Workstations.

My Problem is that Windows Client Administrators can change settings without entering a Password. And almost every employee is local Administrator on his own Workstation.

When I created the Packages, I took default Setting for "Full Clients Protection" or  words to that effect. A 32bit and a 64 bit setup.exe file was created.

Thanks for help

idelfidle