We have AD forest with a child domain. I'm one of the Admins and we are planning to hire 2 junior admins. I would like them to have limited access rights on the system. all i want them to do is add PCs to the domain, install apps on PCs etc. Nothing inside the servers. What is the best way to do this?
Also I would like to add an enterprise admin to all the workstations using a Group policy. Can we do this?