When you administer a Windows NT 4.0 domain from Win2K, and you change a right from the policies menu, you may receive an error indicating that you can not remove the Log on Locally right from an administrator.
When I first posted tip 1946, I indicated that you could copy
usrmgr.exe from a NT 4.0 Server cd-rom. I was incorrect. You must use a copy from SP4 or greater.