If you are using SME Server as a domain controller and the windows workstations have joined the domain then by adding users to special groups you are able to change the rights a users has on that workstation. See [https://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter9#Setting_Windows_Admin_Rights Here] for details.