Okay... here's a new one:

User objects are found in Active Directory (AD). I can open AD and right click on a user to open the properties on it. I can then go to the security tab and adjusted the special permissions to allow a specific user specific rights to that object.

How can I modify those permissions via command line?

Or is there any other way of doing this?

Basically I don't want to give anyone the administrator rights on the server. I don't have access the server. I don't want to give up the password. But I can deliver a batch file or other program that I can run under admin rights without their knowledge.

Maybe a PERL script or some sort of tool that records my actions here to I can duplicate it via some tool? ARG!!!!!