The user can do anything. You will not have access to any server on the network but will be able to change security on files and folders of the C drive of the computer. Log in as wsadmin. Locate a folder or file you wish to change the permissions on. As a standard practice the everyone user should be removed and replaced with the group administrator, and either staff or students.
Groups have an icon that has two heads, individual users have one.
The process for changing permissions on network folders and files is the same process. To change permissions on the files or folder use the same process as above. Remember that this should only be done for software that needs to be available to every user.