[ActiveDir] GPO being denied

[Cothern Jeff D. Team EITC]

Ok here is scenario.   I have a Terminal Server with a Policy assigned to it.  Thru this policy user are unable to have any local peripherals redirected and used thru TS.   Now a requirement has come up for a few users to have this ability.  So I created a policy that allows this to happen.  I set that policy on the OU the TS system is in.  I also set the group as the security filter for it.  When the test user account logs into the system the policy that is suppose to change the setting to allow the printer redirection is being denied.  Its saying security filter.  But I checked and the user is in the allowprinter group and that group is the one that is in the security filter and under advance both read and apply gpo are checked.  I don’t understand why the user is denied from that policy.  Any ideas?     Jeff