I added the line:
Domain Admin Group = @dom-adm-grp
to the template file for /etc/smb.conf
And then crated a group named "dom-adm-grp" in the e-smith manager. Every member in that group has Administrator privileges when he logs in a WinNT client.
Michael Jung