Have you tried something similar to System Policy Editor? Some things can be set-up using System Policy Editor. Look for it in your ORK. www.microsoft.com/office/ork (Office 97) has some info. Its a template which is loaded into the server as a config.sys for specific or default machine users. I crafted group and document specific settings folloing the system policy editor and Support8/Support9 macros. Record macros of settings you wish to implement (remember reveal codes? this is revealregistry setting VBA style), open in VBE, add a little VBA or VB, and place where the macros can be executed automatically or manual, permanently or eventually. Just remember that VBA has to act upon something with MS in it.
The registry is the not so secret backdoor without a key. If an app can write to the same place where it reads from, so can the user. I use lock (read only) and load/unload templates - no fuss, no mess. Let the machine do what it does so well, repetitive work. If the user would rather tinker with the app, subscribe them to Tech Republic, a different career perhaps, he, he, he.
My pleasure if this gets you closer to some solution. Good luck.
