To repeat- You're getting that error because if the computer object or authenticated users is not on the acl to apply gpo and reaf gpo, the user portion of the gpo which is defined for the ou the computer object is in, will not apply. Both the gpo defined on the user and the user portion of the gpo defined on the computer are applied in merge mode. If the pc doesn't have rights, the user portion of the computer's gpo will not apply and you'll get that error -------------------------- Sent from my BlackBerry Wireless Handheld (www.BlackBerry.net)
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/