Local admin rights on a domain

I have a bunch of 2000 pro workstations as members of a 2000 domain. I need to give one group of users a higher level of access to the workstations (full control – to change the registry) without giving them more access on the domain (sever access). any ideas??