Domain user accessing admin tools

[Cstorey]

Today we discovered a single user was somehow able to access the admin tools in the start menu and able to use most of them. This user is a student and they all have such things disabled and are not allowed to even right click on anything, yet this one can do it on select icons such as the admin tools and the computer management option under the 'Computer' tab.

 

Any ideas how this could have happened?

[rrrrr]

If they have a user account, accessing computer management should prompt a UAC login. Does it?

Have you checked result set of policy for the user to check gpos are applying?

[Cstorey]

No UAC appears, and my manager is checking them when he has more time to go through it in depth. The admin tools are blocked by default by our group policy and only the domain admistrators have access to them, no one else.

[TechMonkey]

Are they actually accessing the computer tools or have they brought them in on a memory stick?

[Cstorey]

They're actually accessing them. We think it may be to do with his profile because it is on every PC he logs on to.