We have a new IT personnel. I want this person to have domaain admin rights with limited capability.
I want this limited domain admin to add computers.
I want this limited domain admin to add/remove programs.
I do not want this admin to be able to use RDP or access any of my servers.