The users log in on the Access point, so I assume only the server should have these registry changes.
But this means that all users have the same restricted functionality ... but is there a way of spliting things up?? ... I would like to have a couple of persons to have 'Developer' restrictions and all others 'Analyzer'.