I have a strange issue going on here...

We have a Windows 2000 SBS domain in our company. I have some OU's set up
and some policies are applied. However, nowhere do I have a policy set to
not allow access to control panel options for domain users of any OU -
EXCEPT for our terminal server users - who are in a separate OU altogether.

I have one user on a new XP Pro SP2 laptop who is NOT in this OU at all, yet
when he tries to access a control panel applet (i.e. Printers and other
hardware) he gets the following message...

"These Control Panel options are not available. The content of this Control
Panel Category has been made unavailable by your system administrator. To
make changes on this area, contact your system administrator."

This user is logged onto the domain, and other users in the same OU who are
also logged into the domain, have full access to their control panel
applets. His domain account is also listed as local "adminstrator" on his
laptop. If I log on to his machine using the local administrator account, I
can access the control panel applets no probs... If he logs in locally to
his laptop, he can access the control panel applets. I also checked the
local policies on his machine - saw nothing there that would prevent his
domain account access to the applets...

Any ideas on how to maybe rectify this issue?

Help!

Thanks, Brad