Hi Sharedmadness,
There is no requirement task for your lab computers if they locate in a domain environment. Sctsetting.adm is a group policy template. When you link it to the OU, related registry keys which hold the restrictions will be copied to the clients automatically.
Please also understand that as the settings included in SCTSettings.adm are user configuration settings, the restrictions will be applied to the users in the OU. The result is wherever user logs on, the restrictions will be applied. If you would like to enable these restrictions only when user logs to the specific computers. We can add these computers to an OU and then use the loopback feature of group policy to deploy the user configurations to the computers in the OU.
The configuration can be found under:
[Computer Configuration\Administrative Templates\System\Group Policy\User Group Policy loopback processing mode]
Here is a related article:
231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287
As the group policy will apply to all the users who log to the computers in the OU, the following article will be helpful if you would like to bypass administrator accounts.
How To Keep Domain Group Policies from Applying to Administrator
http://support.microsoft.com/?id=315675
Please also pay attention to the following known issue:
After enabling "General Windows XP Restrictions" in SCTSettings.ADM Users logged off automatically
http://forums.microsoft.com/WindowsToolsandUtilities/ShowPost.aspx?PostID=1939711&SiteID=69
Best Regards,
