I am responsible for many stand alone laptops that are never attached to
domain. I already have a login script on these machine that silent merges s
.reg file to ensure settings remain the way I want them.

Several settings are only available using MMC and the group policy snap in.
I need to know how to ensure those don't get changes either. If needed I
should be able to export a known good policy template, but how do I automate
importing it, or better yet handle this taks soley within vbs

It is neccesary for my users to be local admins, so yes, they do have the
rights to changes things. However with the login script we have reduced
problems greatly