Somebody please help me! I have a Windows NT 4.0 domain and a Novell 3.12 (stop laughing) network that my users log into. We have started getting Win2K Pro desktops and laptops in, and here is the problem. When my users login they are executing bothNT and Novell login scripts, some of these scripts make registry mods. My users have the Registry blocked the the policy but the login scripts still run fine on Win9X PCs. On the Win2K PCs we get errors because the users don’t have rights to modify the registry. What I want is to enable the login scripts to make whatever mods are needed but still keep the Registry off limits to users, so they can’t install apps or run regedit. Right now we add the Domain account to the Administrators group on the local Win2K PC but that gives users more power over their PCs than we want. What do I do?