I just have a question for anyone whose interested:
When it comes to client-end administrative rights, are you guys more apt to create special-case groups on the server, then transfer them to the client machine (so that some users can have administrative rights) or do you prefer to use the "My Computer -> Manage -->Connect to a computer" option to connect to a client directly via the server and change user rights (add them temporarily to the administrator group on the local machine), perform whatever tasks you/they need to do, then remove them from the administrative group on the local machine.
Curious what you guys think.