How do I setup GPO for acct that will override some Domain..

Archived from groups: microsoft.public.win2000.group_policy (More info?)

We are revisiting GPOs for the new XP SP2 rollout. One of the things we did
in the past was shutoff Windows Update for our users (we controlled
centrally) BUT defined a GPO to an OU that contained an admin acct that had a
policy to allow them to run Windows Update. The OU only contains this admin
acct. IOW, only an admin could run Windows Update on a machine - great.
This worked fine on any machine that admin logged into prior to SP2.

On SP2 systems now it no longer works. From GPRESULT on the PC the admin is
logged into I'm seeing the GPO assigned to the OU being applied for the User
BUT NOT for Computer.

Is this by design?? If so, how do I apply computer only settings to the
computer this user is logged into. If not, why are the User settings
propogating but not the Computer settings.

TIA, DMS