Software Deployment

Registry related question.
Policies/Adobe/Acrobat Reader/10.0/FeatureLockDown/cTrustedFolders/cDataInjection.

I have a problem with a document that must be trusted, it's placed (stupid enough) in all the users profile.
I don't want our users to have the option to use "always trust this document." But in the same way I want to this document to be trusted for all users. I have tried to use wildcards in the policy for local_machine but I can't get it to work (don't know if it's even supported with wildcards). When i set bDisableTrustedFolders to 1 the option is greyed out and the settings to unlock the file in current_user stops to work. It's possible to change the local_machine policy to unlock the document for the user but I wanna avoid chaning the location of the file everytime a new user logs on to the machine. I also wanna avoid having hundreds of policys for every machine.

Am I missing something or is this function not built in? Anyone else with the same problem?