How to correctly restrict disk access rights in AD?

Question

Active Directory

There is a local disk, I want to restrict access to the disk to all users except administrators. The essence of the plug: I remove the rights to everyone except the system and the FS01\Administrators group (FS01 is the machine name) and the domain administrator loses access to the disk. Please explain why this is happening, because the Domain Administrators group is added by default to the Administrators group on local machines (I checked, the group is present). If I add disk rights explicitly, i.e. CORP\Domain Admins, access is restored.
Windows SRV 2012R2.
ps. I apparently don’t understand something global in the operation of the rules in ntfs, so I really want to figure it out, and not stupidly register the rights manually.

Answer 1

UAC works. Run any "commander" as administrator and check.
Prescribe manually or through GP rights.
PS I note that UAC does not work over the network. Maybe you don't need to change anything?