I have a BDC and I want a Domain user to log on locally with Admin rights only to that BDC and not Admin rights to the whole network incl PDC . Is this possible ?