Hi there,

I've been challenged with this scenario and I'm hoping the ZCM guru's can come to the rescue. The answer is probably obvious but I haven't found it yet.

How can I accomplish the following in a non-domain environment in ZCM 10.3:

1. Apply ZCM local GPO to lock-down the PC for normal users (got this working)
2. Exclude admin users from the lock-down (got this working too)
3. Have both of the above still be effective if either type of user chooses workstation only login and does not authenticate to ZCM. (this is the part I'm having trouble with).

The reason we want this to work is that we need to preserve the lock-down for non-admins and we want administrators to be able to manage a disconnected PC/laptop.