Windows 2K Pro Policy in WinNT Domain

We are upgrading our users to Win 2K pro but are not moving to Win 2K server until next year. We want to lock down the desktop somewhat, but don’t want to have to visit everyone to make a change. I know you can use gpedit.msc but not remotely. Any ideas?