I've got some machines that were upgraded from ZfD7 to ZCM10.1, and some that were built from scratch with only ZCM10.1 .

GPOs work perfectly on the machines that never had ZfD7. Yes, I was using GPOs with ZfD7.

On the machines that were upgraded, ZCM reports successful application of the GPO, however only the "Computer Configuration" settings are applied. The "User Configuration" settings are not applied, and as a result all my students have access to the control panel, etc.

I've been searching the registry for some remnants of ZfD7 with no luck yet. Any ideas on what ZfD7 left behind that is killing my GPOs?