Is there a way to create a (preferably domain) user that would allow my student helpers to have local admin access

on a machine (or group of machines) without giving them any domain level admin permissions?

Thanks,

-John

create a domain user group and add them to this group. The add this group to the administrators group on the machines. They won't have anymore rights on the domain than they do now, but they end up with domain rights on the desired machines.