Allowing local admin rights but …

…not domain wide. I would like to give my users the options that an admin might have -on their individual pc’s- but not have that carry over to server access.
When they logon to the domain, it uses their network rights, so essentially, because I’m not allowing admin privileges on the server, they don’t have admin privileges on their local machine.
Can I change that?