Is there any way you can partially give domain admin rights. I have BDC at remote site, admin at remote site wants domain admin rights to load software on NT workstation and some time to load software on BDC. He is memeber of server operator and account operator. I dont want him to have domain admin rights, since I use NTFS permission to control HR home directory and company confidential directories.
