JSI Tip 5619. How do I apply local policies to all users, except administrators, on a Windows 2000-based computer that is in a workgroup setting?

In tip 2492 How do I 'filter' Local Group Policy?, I described one way to accomplish the subject task.

Microsoft Knowledge Base Article 293655 contains the following summary:

This step-by-step article describes how to apply local policies to all users except administrators on a Microsoft Windows 2000-based computer that is in a workgroup setting. The article also describes how to restore the original local policies.

When you use either a Windows 2000 Professional-based or a Windows 2000 Server-based computer in a workgroup setting (not in a domain), you may have to implement local policies on that computer that can apply to all users of that computer, but not to administrators. This exception allows the administrator to have unlimited access and control of the computer, and to be able to restrict the rights of users who log on to that computer.

The Windows 2000 Professional-based computer or Windows 2000-based member server must be in a workgroup setting for this procedure to work. In this situation, the domain policies cannot overwrite the local policies because the domain policies do not exist. Microsoft recommends that you make backup copies of all the files that are edited.