I have a active directory tree that does not have ou’s. It contains the defaults, builtins, computers, users. All my users including administrator are under the users folder. I have setup a group policy at the domain level. (.org) but I do not know how to keep it from affecting the administrator account. example: disable control panel, disables it for administrator also. How do I exclude the administrator account? I have a local lan that doesn’t really need ou’s.