Thanks Joel and NTDOC, i suspected that a GPO would be the ideal place for this due to the default security permissions on that particular key.