That's the thing, when going in there, any changes made to user enviro affects the administrator as well. There is KB article in MS on how to make a backup copy for the pol file, then logon as user, then go back as admin and copy over the policy with the backup, so that the options do not apply to admin, but that does not work if I want the original policy to not invoke control panel (or any msc or mmc snaps). In NT, we used to do this, but in XP there is no such separation. There's gotta be a way to do this, but no luck yet...