Frank wrote:
Are you using a window 2008 domaincontroller?
Are you able to use gpo preferences?
An interesting fact is that you could use Group Policy Preferences even on Windows 2003 domain controllers, you only need a Windows Vista / 7 with the latest Group Policy editor to create the preferences and the 2003 DCs could then deliver them without knowing what is inside.
(For XP and 2003 servers that will recieve the preferences the GP Preference CSE will need to be installed.)