ok i resolve the problem it was DNS i find it on a web page that said: A. Win2K might not apply GPO settings at the OU level even when everything appears OK at higher levels in the Active Directory (AD) structure. This problem commonly occurs if the client’s preferred DNS server address isn’t working. To determine whether you have that problem, perform the following actions: Log on as an Administrator to a client PC, and start the Microsoft Management Console (MMC) Computer Management snap-in (go to Start, Programs, Administrative Tools, Computer Management, or right-click My Computer and select Manage). Under System Tools, expand Event Viewer, then access the Application log. Check the log for the following entries: Event ID: 1000 Event Source: Userenv Description: Windows cannot determine the user or computer name. Return value (1722). If these entries exist, the client's preferred DNS server address is invalid or unreachable, which prevents access to the DNS information, and in turn to AD information and applicable GPOs. To resolve this problem, correct the DNS address by performing the following steps: Right-click My Network Places, and click Properties. Right-click Local Area Connection, and click Properties. Click Internet Protocol (TCP/IP), and click Properties. Type the correct DNS address in the "Preferred DNS server" field. Now, when you log on as a user of the OU in question, Win2K will apply the GPO settings. For additional information about the Application log error, see the Microsoft article "Event ID 1000 Is Logged in the Application Event Log." thank to anyone that tried however.
