HI Douglas42Adams,
sjesse is correct: NoAD mode would be a much better approach than trying to get this to work with local Group Policy.
(As for your other remarks about Group Policy: that's more related to Instant Clones and machine policy settings.)