Windows

Hi Faisal

When a user logs on locally (i.e. to the workstation), they are authenticated locally. You are right in saying that any user will only be able to access the features available from the domain when they log in to the domain as a domain user.

The rights assigned to the user locally do not affect the priveledges assigned when logging onto a domain. Therefore, a user who has admin rights locally will not have domain admin rights. Also, when logged onto the domain, the user will still have admin rights locally.

You can change this behaviour by setting Group Policy - and I will leave that topic to someone else.

Why don't you try to just leave the administrative account locally on every client. Then log in as administrator on client, and go to users and computers and add a local, but domain related user. The user will be the domain one, but will have administrative privileges on the local computer.
Just remember that in Documents and Settings there will be two folders, one for the domain user and one for the local, you can either point "My Documents" to one of them or move all the current stuff from the local folder to the domain-related folder