I would push those requirements through Group Policy and/or run a login script. I'm honestly not that sure about the Default User profile in Vista and only used that in XP for basic things like controlling wallpapers and stuff. Group Policy is more powerful for enforcing the kind of requirements you need in my opinion. Of course this is assuming your on Active Directory and are using Server 03 or 08.