Yes, if it is required that you must use Windows authentication and are not able to grant DBO privileges to your geodatabase administrators then that method will work.
If your requirement for Windows authentication is flexible, a slightly easier option is to use mixed mode authentication with an SDE schema that uses database authentication and have all users other than SDE use Windows authentication.