I tend to create a differnt GPO for each purpose. For instance, I have one to deploy Office 2003, and one to configure it. One is called App: Office 2003, and one is called App config: Office 2003. Disable the parts that don't apply (either the computer or user part) when possible.
This is a simplistic example, of course. But it allows me to look through the list and see exactly what each is for.
In larger environments, I tend to do as CaptainCrunch00 does. I love the "settings" tab!
Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)