block admin account from login

What kind of account is it, Local or AD/network?

@Dylan_YYC good question I don't know if you can help me with this, I'm really new to Jamf, we have about 100 mac 80 of them i'll demote them to Standard account and the issue is that I'm thinking about in case they want to give a full disk access or they need to change privacy setting they need an admin account and I was thinking if there is away to create an admin account but this admin account can just be used for Changing privacy settings, not to login to the Mac, or if there is another way around it will be great, thank for your help

Let Standard account turn on the option of click Security and privacy, right?