The reasonably well known about danger of users running as local administrators being able to circumvent group policy settings has been excellently documented and explained by Mark Russinovich with an article on his blog. If you didn't know about this danger, you really should take a look. Mark is one of the guru's behind the excellent sysinternals.com site which I recommend to people on a very regular basis and similarly use their tools to solve numerous problems. Keep up the good work, Mark! I didn't even know Mark kept a blog, so thanks for the link Steven :-)