We are applying some registry keys into HKCU when users log in if they are a member of a certain AD group, this works fine. If we remove the user from the AD group the keys are still in their profile and therefore apply.
Is there a way in GPO Pref that apply the keys every time and don't write into the users profile, so when they are removed from the group the keys never apply without having to dig into the user's registry hive and manually remove them?
Or a better way to achieve this?