Comment 4 for bug 479226

I’m not sure that’s the entire problem/solution, actually.

I think this is saying that a likewise-open user, which has been added to the local group 'admin' (and so should have admin privileges), does not get admin privileges, or they are limited in some way.

Not that the AD 'domain admins' should have local admin rights (perhaps they should, but that’s something different)