I am setting up new PC with Windows 8.1 x64 for office user. I would like to have following account configuration:

  • Administrator account - for administrative purposes (full access/control)
  • Power/Super user account - for maintenance purposes (program installation, minor setting change...[almost full control but GPO and similar "admin" access not allowed - like some sort of Service/Help desk account])
  • Standard user account - for everyday use (limited access/control - no installation and/or settings changes allowed)

I have all three user accounts created and Administrator and Standard user accounts are working fine, but I am struggling with Power/Super user account.
There is only one PC in office so no domain is established - all permissions are Local GPO based.
Power/Super user is needed because there is external contractor for some programs that run on PC and he needs some level of administrator rights - installation etc.

I need advice how to setup Power/Super user account.