We're also having this issue with Group Policy settings being flagged as PUM's. Examples of the some of the Objects Scanned/Flagged: HKU\(The Domain Users Sid)\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER|ForceClassicControlPanel HKU\(The Domain Users Sid)\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SYSTEM|DisableCMD HKU\(The Domain Users Sid)\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER|NoRun HKU\(The Domain Users Sid)\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER|NoFind HKU\(The Domain Users Sid)\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER|NoToolbarCustomize HKU\(The Domain Users Sid)\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\ACTIVEDESKTOP|NoChangingWallPaper How do we add these to the Ignore List? I assume a wildcard needs to be used for the Domain Users SID, But I haven't been able to figure it out yet. Awaiting Guru replies. Thanks