Define Administrator Account in XPP

I’m trying to clarify the following statement. “Administrators have complete and unrestricted access to the computer/domain.” when a user is add to an XPP workstation that joins a domain.

I understand the Administrator user has full control of the XPP workstation but does the word domain in the above statement refer to the workstation’s domain or the domain the workstation has joined. I’m in the process of installing XPP on NT 4.0 domains and W2K AD domains and want the user to do what they want to the local workstation, such as install local software that may affect Windows system files, but not be able to have any Administrator powers on the servers.

Any input would be appreciated.

Thank you,
Bill