My boss has asked me to implement policys on out LAN/WAN which consists of a NT4 PDC BDC Win2k member servers and clients and also 95/98 clients, i know i can use poledit for 95/98 but i am wondering how can i lock down the Win2k clients, without doing a local policy on each machine, and without Active directory, any ideas people, i need this info for Monday!!!