Here is what we have done and it seems to work ok. System Policies must be enabled for this to work, and the config.pol, file must be in the NETLOGON directory. In the User Manager for Domains open a user account or several all at once, and then click propeties, and now look at the policy tab. If you do not specify a directory to store the profile, one will not be stored on the server, and will stay local to that machine. So, as you have defined a custom desktop, limited the control panal,setup a company background, all in the policy editor, then the user will logon, the default registry for windows, will be loaded, then the config.pol, will be checked to see if the user logging on is defined in the config.pol or if not, it will use the default user and the setting in there. In effect the registry is rewritten while the user is logging on, and then all they see is what you have left for them to see. Keep in mind that a checked box will enforce the setting, a grayed bow will ignor the setting no matter what is there, even a previous user, and a cleared box will as you guessed it, clear the setting back to the default of the windows, OS setup. Remember NT users, must have an NTconfig.pol in the NETLOGON directory for this to work for them.
Good luck...
BTW Tech Net has a wonderful white paper on policies, that will prove to be helpful.
Bye,
Smurfman
