This is one of many reasons why I remove group Builtin Administrators group.  If you have a DBA you don't need your Sys Admin with that level of access.