>>> I have some client programs, that need local admin rights. >>> I there a way to create a group in the ad to have local admin rights >>> without domains admin rights ? It can be done locally or through a Group Policy in AD. Information about this is easy to come by on the Net.