I moved the test machine into a No GPO OU and removed protected mode to prove a point. Corporate policy does not allow protected mode to be unchecked.
As a result, the IE7 Thinapp will be available for very limited use on XP machines only.
thanks for your help