profiles nt 4.0

I setup roaming profiles and assigned users to groups, I then assigned security policies to the groups, When a user logs into one workstaion he can access things like the A: drive and cdrom, explorer, If that same person logs into another computer and tries to access these same things it sends an error message back saying that sys admin has restricted this machine and cannot perform that operation. I made sure that the group was put into the admin group on the local workstation and still get the same result. Also if a make a change to the policy it doesn’t seem to update till I erase their local profile and then they log back in.
any help would be great.