I have some NT 40 Workstations that need to be added to a domain. They need to maintain local admin rights, but not have admin rights to the entire domain. CAn this be done w/out having the user log off the domain and log on locally?? Is the Zero Admin kit necessary to achieve this??

Global users and groups can be made members of local groups. All you have to do is go into user manager for the local workstation and add the global user or group to the local Administrators group. I had to do the same thing for my sw developers so they could install thier own sw.

If you are using Novell for your network and are using workstation manager, you must make sure you allow your users (thru workstation manager) to keep admin to the desktop, otherwise wm will revoke it. From the sounds of it though, you are running NT only, and what Anthony says above is right.