Hey Jason,

I'm stuck in a similar situation with user's running amuck on the internet and have found a *.reg file to be most helpful in clearing out unwanted registry entries. It can be easily edited as changes occur and is a great time saver in removing or changing the registry. It can be implemented individually or deployed on a larger scale, which I've done utilizing SMS.

I've posted a basic example for download on the web at:
http://home.cfl.rr.com/savvyshe/IEfix-lock.reg
http://home.cfl.rr.com/savvyshe/IE-unlock.reg (just in case)

Or below is the basic script example: (It's pretty easy to figure out and/or plenty of resources on the web) Here, I've reset some string values, deleted entries, and implemented a lockdown.

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"=http://www.google.com

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"=http://www.google.com

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Bar"=http://www.google.com

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Search Bar"=http://www.google.com

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use Search Asst]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Use Search Asst]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"NoBrowserOptions"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"Homepage"=dword:00000001