We have a requirement from a client to protect the database our application uses, even from their local administrators (Auditors just gave them that requirement).
If you don't want any people in the admin group on the server to be able to access the database, then remove the "BUILTIN\Administrators" user on the server.
However, make sure you have another user that is a sysadmin on the server!