Running windows 2003 standard edition... have a pdc and two terminal servers... I have a regular user that when she logs on as herself, for some reason she has access to admin tools, etc just like if I were to log on as administrator... I checked her profile in the directory and I can see no reason for this happening... changed her password but she still has access to admin tools, etc... strange huh? Please help... Thanks

What security groups is this user account a member of? Is it a member of a group that has admin rights? Possibly a local machine administrator group on a server?

Any user can run AD Users and Computers but that does not mean they can change anything. Any user account can add a computer to a domain but only up to 10 times unless the permission has been delegated at the computers OU.

Also, any user account can be delegated many levels of permissions at different OU's.

Unless you are blocking the MMC Snap-ins by the use of Group Policy, they can launch them. Again, this does not mean that they have Domain Admin permissions.