We have a Windows 2008 standard Terminal Server which runs our business management software, which itself requires local admin access to run.
When Automatic Updates are available users are presented with the option to restart, and it only takes one user to restart to take the whole system offline for everyone else.
We've disabled notifications for domain users using a Group Policy, but can't find any way to prevent Local Admins from getting them. Is there way to do this? Disabling access to the Restart/Shutdown options doesn't prevent the users from restarting from an Automatic Update prompt.