Give full access to a domain user who can do everything on his own system

Hi everybody.
How can I give full access to a domain user who can do everything on his/her own system except change network configurations and computer name/domain changes without add that user to administrators group ?
Can I handle this matter with group policy?