Dave,

Could you start a new topic on this and maybe refrence to the last part of this topic?
This is actually a topic about something else.

-1 gpupdate gives a refresh of the policy right now (wait for the doamin to sync before gpupdate or sync domain manauly in AD sites and services). Reboot also does aply new policies but reboot takes more time then gpupdate.
-2 yes. gpupdates should be done on the client. it refreshed both policies.
-3 use xp adm's. The sync option is in the xp adm's also.
_________________________
Mart

- Chuck Norris once sold ebay to ebay on ebay.