How bout just adding Domain Users to the local admins group on each station...