Well for a start, an IT Tech would NEVER give everyone local admin rights because thats just crazy. Lets start with adding a member to a domain. The default setting for Windows Server 2003 lets each user add up to 10 computers to a domain anyway, providing of course, the Network Admin adds each computer to the Active Directory Users and Computer snap-in. Anyway, you can just allow them to do this in the Group Policy Management Console | User Rights Assignment| | Add workstations to aomain Under Security Options in the Group Policy Management Console you can allow people to install printers. You can automate software rollout in Group Policie as well but its best not to allow everyone to be able to do this themself, otherwise some people will start installing un-licenced software they have downloaded or brought in from home.