Darren has a point here. Did you apply the Admin Template settings under Computer Config or User Config? Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 | http://www.dvn.com <http://www.dvn.com/> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Thursday, October 02, 2008 4:09 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: New to the list, vexing issue here... Stephen- If you are using Admin. Templates IE zone policies then it wouldn't be a tattooing issue. I wonder if some loopback issues might be throwing things off. I presume you guys are using Loopback in a TS environment? Also, have you fired up userenv.log to see what it is saying for a given problem user? Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Stephen Barash Sent: Thursday, October 02, 2008 2:01 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] New to the list, vexing issue here... Hello folks, I've been trying to roll out Administrative Template IE7 Intranet security zone changes via group policy for a long time. Gpmodeling shows the changes for existing users. With gpresults, the changes are never picked up - gpupdate doesn't help. If I create a new user, the new user does pick up these changes. But no-go on the hundreds of existing users. This is a load balanced terminal server environment, with roaming profiles. I thought this may be a 'tatooing' issue, but tools like Clean Registry Policy Utility don't seem appropriate as user profiles are stored at a centralized location on a file server. Any suggestions? Especially for a way to propagate these changes en masse? Thanks! Stephen Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.