We have an NT domain with XP clients that I want to lock down. There was a post on the XP board regarding adding templates from the 2K server CD to NT. I've copied the post at bottom but have a few questions... First of all will this work? The poster said it would but I've read some things about persistent settings. I don't know if this will be a problem or something I can live with. Also, can you just copy the .ad_ files from the Server CD to the NT server, rename with .adm extension, import them and then use them? Is it that simple? I tried to do this with the System template (probably not the one I want to use). I renamed it to .adm and the went to add it but received a message about some key being too long. Am I doing something wrong? Does it matter? I actually want to set the policy for a group of users logging onto XP machines in the NT domain. Tips would be appreciated... "The adm templates that are found on the Windows 2000 server cd will work on XP workstations. Just import them onto the NT Server you are using and incorporate them into your policies. We are using them right now and they are working fine. The gpedit.msc will only do the local machine. You don't specify if you want the policies to be enforced over the network or not but, if you do, gpedit.msc won't do it for you."