Is there anyway to deny access to the administrative share C$ on any machine.

This user is a member of the local administrative group on the member server.
If he still have local admin rights to the member server will he still be able to get into the box through the administrative share C$?

This user was taken out of Domain Administrative group.

I want to restrict this user from being able to access the administrative shave C$.

Can someone please advise me how I can do that. But he still needs permissions to the member server to do maintenance.

thanks