Your techs *should not* be local admins anymore. It is simply too dangerous.
I have personally been a limited user on all my laptops, VMs and desktops for three years. I am living a happy life. It is time to completely eliminate this concept of "Techs are Local Admins". It is simply too dangerous to your security.
If you need help, removing this from your network, please give us a call.