i think my previous post sounds a little too confusing. Whats happening is that i have created a group policy for a group of authenticated users on my server. And when i log on to the domain from another computer, the policy doesnt work. I have made sure to add the policy to the group(OU)...alas, no dice. do i need to enable something? I figure all that you need to do for this to work is: create a policy, add it to a group, login under that group and-POOF! things are on lockdown. again, ANY help is more than welcome. I have been searching the net for info, but cant find anything that addresses my problem.