Jan 27 2020
Jan 28 2020
Yes, if they are added to the local administrators group this will give them full access to the machine. This is a bad idea for a multi user scenario, especially if only one user needs admin access.
You can make a persistent desktop for that user (with D2/3 SKU) that where they can be an admin.