i used mmc addin for group policy, then created a local gp that applies specifically to my kiosk account. strangely enough, when i went to go look at the machine i was using as the source for the image, the group policy file didn't run on there AND it was disassociated with the original account that it worked on. that was probably because of the sysprep process i ran. anyways, i just re applied the GP and rebuilt the image. it works great now on other computers. next time, i'll need to use the security addin to build a template from the start. thank you for the heads up! none of the group policy/AD/SCCM "specialists" were willing to help. they all got pretty pissed when they heard i built a local image (it's off our domain and using their image would require me to completely redo THEIR group policy settings and uninstall default software etc) and used that as a reason as to why they couldnt/wouldnt help. oh well, its fixed now.