windows XP security

Hi All,
we have some new laptops with windows XP sp2. we have set the users up to log onto the domain at work and then copied domain security to each user and set each user as a power user. However, the user cannot access certain parts of the laptop i.e. media player doesn’t work, they cannot change passwords. It appears the only way in which to get these attributes of windows is to make each user an administrator which we do not want to do. Does anyone have any ideas on this issue.

many thanks

Alan.