nusrmgr.cpl = not on windows 2000
control userpasswords = the problem
mmc.exe = locked down to myself only
control.exe = cannot lock down otherwise other options wouldnt work such as mouse etc etc
In theory your solution is the best but in practice i wont work for me. If i were in a domain i could downgrade the user to power user and enable some options that are needed via group policy but i am not.
Again thank you for your help