You should create individual admin accounts, instead of sharing the default admin account. It would also be wise to not assign any full admin account to machines, as you may inadvertently change the password during a Windows password expiration notice.