Is there a way to setup a sub administrator in NT who can handle most day to day rights issues without him having the main key password and login to add or change user rights?