I wonder if and how I on a computer without the Novell client apply different rights for different users using zenworks?

The idea is to have the guest account _extremely_ limited.
Administrators should have no restrictions.

I have a policy associated with the workstation and this ofcourse applies to all useraccounts on the machine. Policy is set to System Startup.

I'd like to administer this with zenworks and not just locally.

Is there a way to do this?
If not, how do you recommend to administer a Public computer?