Is there a simple solution for assigning local administrator rights to domain users. Say I want another colleague in the IT division to have admin rights to join computers to the domain but cannot modify the roles in the Domain Controller (Server).