Have you ran GPOTool against all DCs in the domain? That will tell you if they are in sync with respect to the various parts of the GPO (AD & SYSVOL). That would be one reason why its not working on the Win2K DCs. Also, if that doesn't tell you anything, fire up verbose userenv logging on one of the machines that is having problems and post the relevant parts of the log here. Darren _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of DDorsey@xxxxxxxxxxxxxxxx Sent: Tuesday, September 05, 2006 9:06 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] PCs authenticating to Windows 2000 DCs do not get Group Policy We are having an issue with applying a GPO. After extensive testing, we have determined that PCs (within the same OU) that authenticate to Windows 2003 Domain Controllers get the Group Policy just fine; however, PCs authenticating to Windows 2000 DCs do not get the Group Policy at all. Have you seen this before? Any Suggestions? The Policy is applied to both users and computers and loopback processing is enabled. Thanks, Dave