If your users are logged in using SME Server as a domain controller, then they are logged in as Domain Users, which limits their Windows privileges.
The best way to fix this problem -- if you want to fix it; I don't think that making ordinary users Administrators is a good idea -- is to log in as "yourdomain\admin" on the affected machines and add the required user accounts to the "Local Administrators" group.