Which AD group should I add admins to?

Question

Active Directory

In which group to add admins-enikeys who go to users and solve local problems (install software, printers, etc.). I do not want to give them too many rights, but I did not find a ready-made group in AD.
Basic requirements for the rights of users of this group:
Allowed:
1. Installing and uninstalling software on user workstations.
2. Installing, updating and removing device drivers (printers, faxes and other gadgets).
3. Connecting via remote assistance to users' PCs (resolved through group policy).
It is forbidden to:
1. Connect to servers via RDP;
2. Make any changes to AD (so "Domain Administrator" is not suitable).

Answer 1

users' computers are allocated to a subdivision and a group policy is created for this subdivision:
windowsnotes.ru/windows-server-2008/dobavlyaem-dom...
dragging it would be nice to have such an account for ourselves too, doesn't it take working time to administer AD? then at a time when domain administrator rights are not needed. It is better to use an account with less rights.