Wow, group policy is becomming weird on some machines! I am working on a domain that has all Windows XP Service Pack 2 machines. I am aware of what OU's that these machines are in, and what group policies that are being applied to them... or should be applied! We are running into a situation where some of the machines are still displaying an old legal notice text, that should be over-written by another GPO. Even if you do a gpupdate /force, it still doesn't make the correct group policy changes as it should. It just seems that on some machines the GPO's that it should be getting don't apply, and we'll have to go through and make manual changes to them. What utilities can I use to determine what policies are actually being used (I know about gpresult) on each machine, and how to determine why some policies aren't being applied???