Hi
What you need to do is log onto the workstation as the domain administrator or the Workstaion administrator, start user manager on the workstation, add the domain member who will be using the Workstation to the local administrator group. This will give the user adminstrative rights to the workstation but not to the domain controllers.
------------------
PSM450
Brainbench ‘MVP’ for WinNT Workstation
http://www.brainbench.com