Administration and Security

I have a nt 4 BDC, i want a user to be able to do administration on this machine like share and security but i when to prevent this user to be able to access the other server and doing security or administration.

Thanks,