I have a Windows 2003R2 AD server, and some XP Pro clients. Traditionally, the clients have logged into their machines using a local admin account. I'm now moving them to accounts using the domain controller. Problem is, I can't figure out how to let them maintain admin privileges for their local machine. I don't want them to have admin privileges for the server or other machines on the network - just their own. Specifically, i want them to be able to install printers, software updates, etc.
I'm looking for a concise, step-by-step set of instructions please.