We have a policy that gives permissions to MACHINE\SOFTWARE\Microsoft\HTMLHelp. This policy was set by a previouse admin. He took all permissions out then added domain users. Now we need SYSTEM to be added back in to install certain software packages. We added the correct permissions in. They will take effect on the PC only when removed from the domain and readded. Also if you make a change to the permissions on the local PC it seems like the policy will update after a reboot. GPupdate /force does not update this particular policy.