All my users are local admin on their own workstation (user on others)
I know all the issues of security and such, as well as preventative steps to keep users from fubar'ing their PCs, but with 2000 desktop here, I seldom 1 or 2 per month have to re-image a machine
As for how to add users to local admin, the simplest solution is the ini file routine mentioned.
make an ini file keyed on computername
[admin]
pc1=joe
pc2=mike
pc3=dilbert
...
then you, using a domain admin acct (or acct with admin on every PC) use one of the remote execute UDFs where you can exec
net localgroup administrators /add $name
against each PC
your problem will be building/maintaining the ini file
