[THIN] regedit /s won't run despite GPO setting

w2k3 r2 servers with sp/2

Despite the GPO setting of prevent access to registry tools but allow regedit to run silently (gpo confirmed by checking user's registy hive - disableregistrytools is set to 1) regedit /s still won't run; access is denied.

M$ KB 831787 covers it with a hotfix for SP1, sp2 is supposed to be fixed.

anyone run into this and/or have a workaround?