1) MountPoints2 is per-User, and can only be done via user’s logon script
2) "NoDriveAutoRun" looks no need since "NoDriveTypeAutoRun" has disable the fixed drivers already
3) HKCU…PoliciesExplorer looks no need since HKLM hive setting will take priority
4) Disable CDRom ? really need this ?