By default only The local Administrator account and members of Domain Admins get automatic elevation and this is needed for many things (connecting to remote admin shares is one, apparently it's an issue with configuring MSMQ and NLB also, I'm sure there are others) simply placing a new group into the local Administrators account may not be sufficient.