Giving Domain users the ability to load software.

This is driving my nuts. All I want to do is give roaming user profiles the ability to be a local admin, power user, or user on any workstation they log into. I have a situation where I have multiple doctors using whatever computer they can get to, so as they can run their software, get outlook email, and access to their files.

I know the GPMC is part of the answer. But why is it so difficult to set a domain user to a local admin or power user?? I know that local admin and power user accounts are not available on a Domain, but it can’t be this difficult. I have been all over the web and in books, could really use some help. Thanks!