lockdown GPO question

[Guest]

I want to lockdown a couple PCs, and as many different users use them, they
have many different log on accounts, so i will need to lock the PC down
itself.
If i create a OU, place the 2 PCs in here and modify the computer
configuration section of GPO, this will effect anyone logging onto the PC.

Problem i got is what happens if an administrator wants to log on and
perform tasks, the PC is still locked down.
is there a better way of doing this, ie) preventing any users apart from
admins, from doing things on the 2 PCs??

 

[Guest]

Most of the settings that lock down users from performing tasks or
preventing them from using parts of the OS are in the user config of a
policy.
This is the same type of situation where you might have a TS available to
anyone but still want to limit all users. This were the loopback policy
comes into play.
It will apply user settings no matter who logs on.
This will explain better than I
231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287