Spyrus, check my image to see the deny logon locally from GPO. (This was take on Windows 2003). Not sure if it work on 2K

By the way, I use the Group Policy Management Console
http://www.microsoft.com/windowsserv...gpmcintro.mspx