The problem is that Builtin\Administrators are sysadmins if you don't remove them or change them. This can be an audit problem. Does the server operations group grant you domain admin or server admin on every server? You should manage them just like you manage other users and grant them specific permissions based on business needs.