Client Application permissions

I am sure this is a staight forward question if you are uased to a Win 2K/NT4 network but i am used to win 98. I am now replacing Win 98 PC’s with Win 2K PC’s on a NT4 network. I would like to load the client machines with all of normal applicationsbut make these available to anyone who logs onto that machine. Basically who should i be logged on as when i load the applications. Do i initially log on as administrator and then add the local user to the local administrators group and then load all of the applications logged on as the user or load all of the applications logged on as administrator. Should all users be in only the local users group ?
Any help much appreciated…..