Have to agree with the Penguin Mantra as always. Even for a small shop, domain admin should be domain admin and users are users. Having two accounts isn't a hassle, I have never worked anywhere serious where I haven't had two accounts. It's good protection for your staff also, as at the moment they can be accused of doing anything as they have the power. Restrict access to an elevated priviledge account then audit it like h3ll, keeps those SOX boys at bay too
.