Jan 27 2020 03:47 PM
Jan 28 2020 11:04 AM
Yes, if they are added to the local administrators group this will give them full access to the machine. This is a bad idea for a multi user scenario, especially if only one user needs admin access.
You can make a persistent desktop for that user (with D2/3 SKU) that where they can be an admin.