Ok, before everyone says "Use Group Policy" - been there/done that. Things will work fine then GP burps or some anomoly happens and my users are calling like crazy - So I want to know how to setup IE once for all users without using GP or someone tell me how to figure out how the same GP works one day, but not the next. I have had to remove the Citrix server (Xenapp 6.5 2008 R2) from service, delete all profiles, reboot the server about 5 times until - volia it all works again. Same user, same server, same GP, but the next day one that was working fine will break while the one that gave me trouble continues to work. Yet GP never changed once during this whole nightmare, settings will appear to still be set etc... but somehow something changes and java script/Active X scripts will decide to not work on a particular server. Back in 2003 days, I just made changes and saved in the all users profile... not sure we can still do that in 2008. Ideally, I would take the settings from a working PC and "import" them into the server. Perhaps I need to just dump registry keys and then set permissions to prevent changes.... I am fed up with GP not working and looking for a permantent solution.