Hi,

I'm trying to write an installer for a Vista kiosk application, and wonder
if someone can help me with the issue of applying a user policy to the
lockdown user account during installation.

These are the issues I'm facing:

1) Unable to use a run once to apply the policy due to Vista ACL which
requires elevation in order to write to the policy reg keys.

2) Using runas or altering the registry of the kiosk user from another
account has no affect. On first run the kiosk users policy settings revert.



3) Unable to programmically deploy a user policy (as far as I'm aware).

4) No way to create the gpt.ini file generated by the policy editor ui. This
would enable me to copy a pol template file to the user policy folder which I
know otherwise works.

I'd be grateful if someone could advise me on the best approach for applying
the user policy. This needs to be in effect on first logon, and entirely
automated from the installer. I'm using Wix for the installer and custom
actions where necessary.

Thanks,

Mike