Oops :-) You need to get the updated adm file or as you say, you don't see the updated options. You can either extract it from the IE installer or just upgrade a domain controller to the same or later version, which gives it the adm. When you open an existing GPO, the adm will be upgraded and you'll see all the options (assuming you don't have a policy preventing auto adm upgrades!). Andrew