Ok. So it's not possible then.

So what is the default for domain clients (w2k/XP)? Is that local GPO option enabled or disabled?

I guess there's a switch for the MSI where you can tell it to run with elevated privilegues? If the local GPO then allows is, will there be a user/pwd challenge, or will the MSI simply run with elevated privilegues?
_________________________
The tart is out there