Hello
Let me first explain my situation: Our company hired a new employee for IT department (where is also work). His responsibilities will be mostly "help desk" so he doesn't need full administrator rights to access domain controllers , exchange server etc. and we don't want to grant him that rights. However he will be required for example to install new software and printers on users PC (all PC are in domain) and this requires elevated rights (domain account in administrators group). My question is: how can i either make him administrator but reduce his privileges or maybe it is possible to grant "extra" privileges to his "normal" user account ?