How can I prevent other admins from exporting a private key without knowing the password of a certificate key in IIS?

Question

I have a Windows Server, where my many administrators have access.

The problem is, anyone who have access, can access the IIS. In the IIS, there are many certificates. Right now, any admins can export the keys from all the certificates in IIS without knowing the password. How can I prevent this?

I tried restricting to the IIS to one specific admin but couldn't find an option for this.

Answer 1

1)imort certs to IIS without possibilities of export them(check box in middle import dialog box). 2)reorganize locadmin policy on server 3) store original cert files in other restricted storeges