Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation
Solution 1:
This is really a personnel issue and not an IT problem. If users with administrative privileges can't respect the rules, they shouldn't have administrative privileges.
Even if there was an easy way of preventing an interactive logon, there's nothing to say they can't work around it - for example, they could terminate explorer.exe and re-start it running as their admin user, effectively giving them a full administrative environment. If you give them run as, you give them everything.