initial investations seem to indicate changing a setting is for all users?

Which implies the settings are either in the machine part of the registry or are file-based. There are ways of sleuthing either for changes. Can you deny write access to these by policy or dir permission? -- ******************************************************************************** All mail sent and received may be examined to prevent transmission of unacceptable material. Wellington College does not accept responsibility for email contents. Problems to postmaster@wellington-college.berks.sch.uk. Website: http://www.wellington-college.berks.sch.uk ********************************************************************************