Alright, this topic has been chewed up over and over and I’m still trying to grasp the basics here for some reason. I want to lock down a few stand alone Win2k machines, but not effect the local admin account. Why would anyone want to limit the local admin account? Anyway, how would I change the local policies for all user’s except the local administrator account on a Win2k machine?