Giving a user administrative control?

Hi all

My question is, how do I give an ordinary domain user administrative control over their own PC? For instance, I want the user to be able to update anything and change any setting on the PC he works on every day, but without making him a Domain Admin and while still having him log onto the domain (instead of creating a local administrative account). I’ve seen this done, but don’t know how to reporduce it. I’ve played with the Group Policies, but just can’t seem to figure it out. What am I missing? Anyone know of any good links that can walk me through this? Thanks!!!

– Brandon