This is a comment and a question - It seems as if this particular GPO setting
does not work as designed. The MS knowledgebase states any user id added this
gpo should be able to run disk defragmenter and disk administrator without
administrative rights to the local PC. Can someone confirm that this is an
issue, and is there any way to have this gpo fixed?

The specific GPO is located under Local Computer Policy, Windows Settings,
Security Settings, Local Policy, User Rights Assignment. We've tried
assigning the right to local uesres, on the DC's, to the everyone group -
still doesn't work.

Tx in advance..