I am running 2k3 server with all pc's being 2000 and XP. My issue is that I am the administrator and I would like my assistant to be able to login to the pc's to just install and remove software. With no access to windows settings and all other domain/network settings, and without making him an administrator. Is this possible? Through AD or locally?