OK...hi everyone to start with. Im new here. FIRST POST! OK, I have setup a windows 2003 server, and a windows XP machine to play with group policy, etc. On the server I have AD, and have installed the GPMC. I know how to use AD, so thats not new to me, but I am new to GP, although it appeared very simple. After reading other posts, let me clearly state, I have installed AD I have setup an OU called Call Centre In that OU I have a group called Call Centre Users In that Group is a user In GP, I have created a GPO under Call Centre I have setup do not allow CMD to be used The GP is Linked The GP is Enabled I have added Call Centre Users to the security filter, and removed authorized users I have done a GPUPdate on the client, no luck I have removed the profile, and tried again, no luck. Can anyone point me in the right direction here? Seems like I have covered everything.. Thanks.