about the domain controller

I know this is a old topic but couldnt you create the AD account and login to he local machine as Admin and go to the users local profile in documents and settings and on the security tab give access to domain\user name ?

yes, you can. But you need permission to add a user to domain.