how do you determine whether which gpo has applied and which gpo has not applied for a user? please tell me the commands about gpo to solve this issue?

Hi Muppuri, You could check with GPO reports on the client through GPResult or RSOP command. GPResult http://technet.microsoft.com/en-us/library/bb490915.aspx What Is Resultant Set of Policy? http://technet.microsoft.com/en-us/library/cc758010(WS.10).aspx Group Policy Inventory allows administrators to collect Group Policy and other information from any number of computers in their network. Group Policy Inventory http://www.microsoft.com/downloads/details.aspx?FamilyID=1D24563D-CAC9-4017-AF14-8DD686A96540&displaylang=en You could apply the domain policys immediately to clients via GPupdate /force command. Gpupdate http://technet.microsoft.com/en-us/library/bb490983.aspx Brent Hu, TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi muppuri, You may try a simple command "gpresult /H > GP.html" to dump the GPO result on a the specific user. you may find which GPO won and applied, and what policy settings take into effect. Hope it helps. ScorprioTechNet Software Assurance Managed Newsgroup MCTS: Windows Vista | Exchange Server 2007 MCITP: Enterprise Support Technician | Server & Enterprise Admin