I am tring to implement a new domain using win2K and I want the users to log on to the domain, but I also want them to have complete control (administrator Privilages) over the local machine that they are logged onto only. I do not want to implement they shared software technique. Is there a simple way to give the user administrator access to their local machine only while still upholding security rules on the rest of the domain?