You need to ensure that when users log on to client computers, they are added automatically to the local Administrators group