Pbb321

After I posted that I realized that the UAC was not being controlled by the GPO, but rather by Deepfreeze. Sorry.

I'm going to look into some options, but i do know that one is that you can specify who can open the control panel and what in the control panel they can open. So, your Admins would still have admin control, but they wouldn't be able to SEE the UAC options in the control panel, only domain admins can.

I'm going to look into this, but somehow i have my vista machines configured where some users are admins, but only my domain admin account can enable or disable UAC.

I'll post back hplefully within the next day.