First rule of admining...never have your personal accounts have admin access. You should have to make a concious effort to make changes to machines that require admin access. Second rule of admining, never add accounts to Domain Admins, ever unless you want them to have complete access to everything in the domain. Third rule, if you don't listen to rule 1, then make a seperate OU/Security group for these other user's accounts and set the permissions with that security group.

Regards,
Wizeman