nable Remote Desktop and add this domain user to Remove Desktop Users group. http://technet.microsoft.com/en-us/library/cc794832(WS.10).aspx Enable "Allow log on locally" and add this domain users. http://technet.microsoft.com/en-us/library/cc785165(WS.10).aspx Delegating administration http://technet.microsoft.com/en-us/library/cc778807(WS.10).aspx