I am currently taking over a computer lab in my school(windows server 2003, win xp sp3 clients). I have had some problems with GPO's being applied to the newly installed lab. To test to see if the server was working the following was done. With some help of a technology consultant, we tested out some situations. From what I could see the consultant created a container and then created a test user. He then modified the GPO associated with that container. He basically removed the users ability to see the conrol panel. We then logged into a computer with the user name and password. The computer appeared to apply the settings but after the reboot, the user was still able to see and use the control panel. Nothing had changed. The GPO is enforced but the workstation shows no changes. Is there something extra that has to be done? And my last question, What exactly are authenticated users? Are these users that appear in the container that GPO is associated with? I am wondering if this has something to do with the problem.

Sounds like you have you GPO inheritance turned off.