My account on the domain will be a network admin account for 10 minutes, after which it will set be back to a regular user. what can be done/installed to retain as much freedom on the machine as possible. note: any newly created accounts will be noticed, and local admin passwords changed.