diff --git a/roles/ad_joined/files/pam_mount.conf.xml b/roles/ad_joined/files/pam_mount.conf.xml
index 01eb506..24167bc 100644
--- a/roles/ad_joined/files/pam_mount.conf.xml
+++ b/roles/ad_joined/files/pam_mount.conf.xml
@@ -3,18 +3,35 @@
 
 <pam_mount>
   <!-- Example using CIFS -->
+  <debug enable="0" />
   <volume
       fstype="cifs"
       server="ucilnicesmb.fri1.uni-lj.si"
       path="%(USER)"
       mountpoint="~/"
       options="sec=krb5i,cruid=%(USERUID)"
-  />
+  >
+    <not>
+      <or>
+        <user>local_admin</user>
+        <user>root</user>
+        <sgrp>sudo</sgrp>
+      </or>
+    </not>
+  </volume>
   <volume
       fstype="cifs"
       server="ucilnicesmb.fri1.uni-lj.si"
       path="profiles/%(DOMAIN_USER).V6"
       mountpoint="~/win_profile"
       options="sec=krb5i,cruid=%(USERUID)"
-  />
+  >
+    <not>
+      <or>
+        <user>local_admin</user>
+        <user>root</user>
+        <sgrp>sudo</sgrp>
+      </or>
+    </not>
+  </volume>
 </pam_mount>