For the security reason, I recently create an OU for some users and associated GPO. I have a few questions on that. 1. How can Iremove "Administrative tools" menu from "start menu" for the users on that OU even they are in the administrator group? 2. Because there are too many items in GPO\user configuration\administrative templates\, I forgot which one I made it enabled. After I enabled some items, the icons in the c:\documents and settings\all users\desktop don't show up for individual users. I have to copy every icon to each user's desktop folder. Thanks for the help.

(dealing with old questions) 1. if possible at all, it would prove to be very impractical 2. you can use 'the resultant set of policy' to check what you've enabled If this question still is an issue. Please post it again. Information is the most valuable commodity I know off.