We currently have a native windows 2000 server setup. We have win2000pro and winxp-pro clients. The Active Directory group policies work fine on the 2000 clients, but not on any of the xp clients. i.e. disable showing display control panel item, xp client users can open display properties and make changes to their desktops etc. Any ideas?