Local Admin group restrictions

Hi,

how can i restrict the Win2k domain users who are the members of the administrators group to the local computers(Win2k pro clients) to share/unshare and change the security permissions of the local system disks, folders and files.

Thanks.
Parameshwar