How to neuter an admin

No, I'm not talking about how to turn admins into Benjy's. I'm talking about creating a user that's almost like an admin, but not quite. Cat's Game has a how-to on creating this neutered administrator. Certain aspects of locking down a Mac are easy as pie. Some are a little frustrating. And sometimes you just want to allow someone to do whatever, as long as they don't mess things up royally (like dinking with NetInfo). Of course, this means getting your hands dirty in Terminal, and be prepared to ride as root for added danger. An interesting and manual way to lock down the prefs and apps for those intermediate users...