In the domain security policy this function has not been defined but all users are required to use this policy. i have looked high and low and i can not seem to get this function disabled. any ideas would be great. i have not defined this policy in either of my windows 2000 domain controllers.