Has anyone ever successfully used MS KB Q293655 to set up policies that apply to everyone except the administrator in a workgroup environment?