Group policy is an annoying pain. Yes, there aren't many better options out there, but it's not as if group policy is _good_.