Best Default security group in AD for Tech. Support

Hi guys

I have windows 2003 Domain in my office. I installed
Microsoft SharePoint portal server in one of member windows 2003
server. Our all technical support users are member of administrator
group so by default they get administrator rights in SharePoint portal
sites. I want to remove administrator rights from SharePoint Portal or
from AD but they should get full permissions on client's computer?

1. How can I restrict them?

2. Which is the best Default security group in AD for Tech. Support For
full permission in Client's Computers and no administrative rights?

3. Where I have to move Tech Support users?

Regards,
MaST Max

.

Relevant Pages