Group Policy, Manditory Profiles & Registry Permissions is..

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Guys, I hope you can help me - please feel free to post back with
questions or even e-mail me on this one

I've created a new windows xp load for a school i work for, and deployed it
using ghost. with it i've created a manditory profile, to be used for all
students. i have also created a great deal of group policy elements to help
lock down the computers for student use, these also run startup and shutdown
scripts etc. The server is running Windows Server 2000

Anyway, if i use any of the student accounts other than the one i used when
creating the profile, it fails applying the group policy - i fixed this
partially by giving the student group registry permissions in the profile
registry file using regedt32.exe, (ie some group policy like folder
redirection now works,) but most of the group policy, including scripts,
fails. i cannot apply the global permission to all registry keys, so i'm
wondinging if there aren't subkeys which are failing to inherit this
permission.

does anyone know anything about group policy, registry permissions, and
manditory profiles? i sure would appreciate some help here!

PS i don't see anything in the logs from usrenv regarding this, except for a
message saying offline caching is enabled and shouldn't be. as far as i can
tell it's disabled so i don't know what's going on there.
also getting a resultant set of policy works fine - i get all the policy as
it should apply, but it just isn't applied. i can look at the policy that
states i shouldn't be able to see the C: drive while looking at the C: drive.


--
if everyone sat down tomorrow, and figured out what we have as common goals
and what we can do together to achieve them, would this be a bad thing?