I am setting up a domain network in an office. I don't want leave all the workers on domain admin priviledges. The owner wants the workers to be able to install software. How can I let them install software without making them domain admins? gump

Give their user accounts local admin access on the PC they use. (ie: make them a member of the local Administrators group)

Thanks so much to both of you for your speedy reply. Here's the rub -- the owner says that this solution is unacceptable because they have to log into the local machine. I need an answer that will allow them to acquire the permission to load software from the server when they log in on the network. And I hear you about the spyware/virus exposure. I'm sure all the 'free screensavers' out there are gonna cause me to get plenty of phone calls. But, as I keep telling myself, it's his checkbook. Thanks again for the help and if you have any additional ideas, I welcome them. gump

Create a group on the domain called LocalPCAdmin, add the group to the local administrator group on the end user PCs, then when a user requires this permission assign them to the LocalPCAdmin group on the domain, have them log off and back on to gain the new permissions. Make sure you pull the user back out of the group when they're finished. Teach the owner how to add them to the domain group and pull them back out from his own PC and maybe this will be acceptable to him.