Disable User to Edit Email Signature

I have did some setting in the GPO to control the user to edit their email signature by change the registry setting. However, sometime the user still able to edit the signature and sometime can not. I can not find why this issue of disable to edit email signature is intermittent. Please advice. Thanks