Local Policy/User Rights

We have an NT domain. We are sending out Win 2000 notebooks to our sales force. We want them to be as restricted as possible, with the following ‘abilities’: add printers, change power management options, change time/time zone. We do not want toput them in the Power Users groups. I have not been able to find any policy setting to allow them to add a printer or to change power management options. Please help.