Moving to a singel domain model in our o

What approach would you take in giving out administrative rights to remote site staff for servers moving into the new single domain? Remember, the local site staff used to have full priviledge but senior management wants to limit their access or ability to create NT or Exchange accounts on servers within the new domain. The local staff would have full admin rights for their local resource servers. Any suggestions would be appreciated. Thank you in advance.