Limited administrator account setup

[Donald]

I am trying to create a group for tech's to be able to add
machines to a domain, install drivers and software, edit
permissions, basically everything an administrator does
however I do not want them to be Domain Admins. What is
the best method of creating this type of group? How do I
apply the permissions? Do i edit a security template and
apply it? Do i add them to the restricted groups of the
OU i want them to be able to administer? Any help would
be appreciated. thanks, db

 

[rico]

You can set them up as an Account Operator. You can edit
the security settings, by accessing domain users and
comptuers, GPO policy.