Dan, I agree with Darrens comments but will add that as general rule its better to include all setting in one GPO and unlock settings for individual requirements with single GPOs, rather than the other way around as it seems you are doing it.
Rgds, Tim <snip> List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
