Permissions on local machine vs domain

I have users that log on to a domain on Windows 2k machines. I want to allow them to add printers without actually adding them as a user to the local machine. Is this possible and if so, how?