Group Policy

I administer a Windows 2003 domain, when I want to make the user a restricted, power user or an administrator on his PC, I have to log on to his machine locally and do this, Can I configure the Default Domain Policy to make this centrally but I want to remain as an administrator on all machines?