Need to setup rights under win2K professional. Want to setup users as just regular domain users. However some of these users will need to change their ip addresses, connect/configure switches, etc but not be able to download or install any hardware. Also some users will need to be able to scan documents or burn files to cd's. Any way to granularize permissions other than just making users, power users or admins?