Rejoin the machine to the domain. ( or pull gp down )
Make sure its not a LOCAL admin account.
Make sure she has full control through both permissions settings.
If the "group" she is in has full control move her out of the group and add her name to the acs to full control.
By the way... If you have an error message, post the ENTIRE error message.