policy

after setting all policies on a pc, then running sysprep. I then place that build onto a new pc the policies are enabled but not pulled through. i.e I logon as a user and for instance the RUN command is still usable by that user, even though it is enabled in GPCONSOLE?