System Policies

I’ve set up a system policy, on NT Server (PDC) which is supposed to restrict the user from accessing the ‘DISPLAY’ in Control Panel. I’ve then gone and rebooted the users Win XP Pro PC and can still access the DISPLAY. I’ve also set other restrictions that haven’t worked. Is there something I’ve missed out?