So it took me a while to sort it out but i think i finally have SIMS updating itself when users log in. I followed the above guide and linked the Policy to the Computer OU and it worked. Yey.
OK, let's take a quick look at some of the SIMSPERM.BATfile...
take this line:
SubInAcl /FILE %WINDIR%\SIMS.INI /GRANT=%1=F
This means that the sims.ini file in your windows folder needs full permissions granted to your SIMS group.
(The %windir% is a system variable. To see all the system variables, open up a cmd window and type 'set' (without the quotes) and this will list all the variables)
So, in Active Directory, use the group policy management tool to create a new group policy. Call it something like SIMSSecurity.
In the policy, drill down to computer configuration/windows settings/Security settings/File system then right-click and choose 'add file'
Type in %windir%\sims.ini and set the security for the sims group to full rights.
Let's look at another line of the script:
SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes /GRANT=%1
This is a similar sort of thing, but concerning a registry key. Again, browse the policy object to computer configuration/windows settings/Security settings/registry and from here you can add registry keys you want to give rights to your SIMS group.