Hi All, I think I am having the same problem as Bill. I have my last post on this tread "Windows Server 2003 R2 SP2 GPO Access denied (security filtering)" if you can copy and paste the html at the bottom you should more clearer picture what Bill is facing. As Daren said, "....create a group that includes the TS computers,....", I think it will solve the problem because instead of putting all TS computers, I tried put in the TS name into the filtering, yes it works. But question is, not all TS users computers joined to the domain? I did tried without joining the computer to the domain and the computer won't appears in the selection list of the filter. How could we overcome this issue? Thank you. Tan *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************