Set up Multi-Factor Authentication (MFA), ideally using smart cards.
Treating the Admin PC as just "the IT guy's computer" is a catastrophic risk. It must be viewed as a critical security control, akin to a firewall or an intrusion detection system. Admin PC