Dear all, i configured software restriction policy on windows 2003 R2 Domain. there are several OU. the problem is " Policy is working on 80% of windows xp sp2 computer " where as only 20 % of windows xp sp2 stoping users from runing these (MSN, Yahoo, ) softwares. My understanding is "local system policy" is overriding domain(OU) policy). if i am right than how do i override it. or how do i force Group policy on these systems. i have forced the AD plicy using "gpupdate /force" , and restarted workstations + domain controller. still no success . Any idea to solve this problem . thanks.