Excellent point, I was assuming we were talking about group policy, but that may not be the case.

What OS, specifically are we working with? Can the user be added to the administrators group on the local workstation, or is something preventing that?