Well, the computers and users are in diff. OU's with diff. GP, and no, i didn't use any security filters. I didn't download the GP management console, i'm just using the exsiting add in for GP editing. I've triple checked the premission on both OU's and they seem to be fine and as they should be. Haven't tried the gpupdate/force yet, will give it a try. As to how I set it up.. Created OU's for Computer and for Users. Added new computers/users Created a new policy for each ou and disabled the unneccesary part (IE, no user config for the computer ou). This is the first time I've attempted to do this kind of thing, so I started off with a bit of logic and ended up with this dead end Thanks for the quick response, and I'll give all those things a double check on sunday when I'm back at the office.