A little background and info: I support a number of people who for one reason or another need to be able to do things a local admin can do like install programs and start services (or more accurately allow a program they're running to start a service). All users are in the local administrators...
access control
active directory
administrator rights
compatibility mode
domain control
error messages
gpo
local admin
lotus notes
openafs
permissions
program installation
security settings
service management
service start
user access
user support
vista
windows 7