You may find that you need to add users to one or more local groups, such as Power Users or Administrators, on their computer. While you can do this fairly easily on a case by case basis, it's a lot more difficult to do in a large distributed environment...