Domain Group Rights

I’m pretty rusty so bear with me. I have an NT4 domain and a number of XP and 2K clients. Problem is I can’t seem to allow the users administrative access to their machines without adding them to the Domain Admins group. I figure I want to createa Power Users group which will allow them to add printers and install updates to their PC’s and such without giving them full domain access.

I tried creating a local administrative profile with the same name as their network user, but when they log on the domain overrides their local user policy. If I add them to Domain Admins the problem goes away.

How do I create the group I want and then how do I adjust the rights appropriately. I’ve been through my books and Domain Administrator but can’t seem to nail this down.

Thanks in advance.