restrict users from adding restrictions even though they are local admins on machine

Hi

Is it possible to restrict usrs from making exceptions (files / folders) even though they are local admins on a machine and only allow a few users (AD group) to make exceptions?

ie. we dont want general public to be allowed to make exceptions only deskside team

John