At my university currently all faculty/staff are members of the windows local group administrator. Some users are receiving new laptops this fall with XP installed, during this time we'd like to create a method so that when they login to the laptop DLU assigns them members of the users group. When they login to their existing desktop computer with win2k - DLU continues to make them members of the administrator group. Is there a way to create a new group policy and a new DLU assignment and associate it to the laptop (computer object)? Right now the group policy that assigns DLU to users is associated at the container level.