If you can't do html/css or xml/docbook, then you are an incompetent technical writer.
Because Tenenbaum's lawyer *royally* screwed up the appeal and failed to cite the most salient case law.
Thankfully, the FSF stepped in to fill in the gaps that were missed.
A computer is a general purpose machine, completely customizable by whoever has physical access to it. GPO is a stupid, ugly, misguided hack that can never be implemented in a way that guarantees what it claims to do (much like DRM) because of this.
There is absolutely no reason for any linux developer to waste even a moments thought on this deranged requirement.
You dont like it? Don't deploy *computers*. Deploy the equivalent of a thin terminal or diskless web client.
I understand that corporations want this as a requirement. Its inherently impossible to get right, just like GPO is.
If, on the other hand, you only care to inconvenience your more clueless end users, no problem.
Promising costs nothing, it's the delivering that kills you.