[Samba] Administrators and Users Rights for Windows workstations

[Edgar Fonseca]

Hello,

I having a problem with rights in Windows workstations. I want that all 
users can be administrators of yours stations when they are logged in your 
stations, but I don't want that they can see the share C$ of other stations. 
They can see this because they are administrators of the domain.
They have primary group "Domain Admins". If I try put the users on 
"Administrators" group, they can't logon. If I try put them on "Domain 
Users" group, they aren't administrators. If I put them in "Administrators" 
(primary group) and "Domain Users", they aren't administrators. The only 
possibility for the users log as administrators is that they are inserted in 
"Domain Admins" group.
The problem is the C$. We thinking about use a script to remove this share 
from Windows, but I'm not sure about if this solution is the best.
Does someone know about any solution for this problem?

I'm using samba 3.0.14 + LDAP

Thanks

Edgar