My setup contains Windows 2008 R2 64bit Domain controllers, Windows 2008 SP2 64bit Citrix XenApp Servers, with Exchange 2007.
I restricted access to to prevent users from browsing though the c:\ – which forced me to use the administrative office 2007 gpo templates