The easiest way to ensure that a user does not set settings in the local GPO
is to make sure that they are not local administrators. Once a user is a
local administrator, they can edit the local GPO, but also have thousands of
other ways of influencing and modifying the computer's configuration.
Regards,
Rhynier
--
This posting is provided "AS IS" with no warranties, and confers no rights.
------
"Big O" <o...@obitech.net> wrote in message
news:07b801c347a5$f0204b10$a601...@phx.gbl...