We are doing some win7 testing and running into some minor issues. With XP all our users were part of the administrators group which was done via DLU. Now with win7 we want the average user to only be in the users group but want the ability for some users to be part of the administrators group.

Since we have never done this before I'm hoping to get some info on the best way to do this.