i read that post and i really thought we were going to solve this. i applied that gpo to the domain and unfortunately, it did not resolve the issue. i guess i'm going to have to keep the kill explorer function in my kix script. it appears as if computer-based policies will not run in my environment.