When IE7 first came out, people were having problems configuring it for the entire domain.
The problem was, noone knew there was a .adm template for group policy separate from previous versions of Internet Explorer.
I haven't looked, yet, but is there a new .adm template for IE8 for you to administer policy on IE8?