Some one help me on this. am running a win 2003 server and i have setup user accounts for workstations running winXP. I have restricted some of my users rights using the sweet group policy but now i want to get the smarter ones from being able to run the regedit from the run command on their workstations. how can i go about this? can i do it through group policy editor or otherwise. tell me pro's.