SEP 12.1.2 - Issue with Password Protection

Hello,

I have set up SEPM 12.1.2 in our environment and everything thus far has proceeded well. I have one issue: I am trying to use the client password protection feature to keep people from disabling the client. Regular users have the option greyed out as planned, but people that are members of the local administrators group can disable without any prompts. I have it set up in the General Settings - Security Settings tab to require a password to stop the client service and to uninstall the client. Is there a setting I am missing somewhere?