We upgraded all of the domain controllers in our forest to Windows 2003 SP1 in the last year. I recently went in to apply a group policy to block the install window for IE7 using their administrative template. The policy only seems to be applying to have of the child domain controllers. I ran a query on all of my domain controllers to see where it was working and where it wasn't. I am getting the error below on various different group policies: Windows cannot access the file gpt.ini for GPO CN={D25FE004-C698-4097-BB39-0E3ACD0BC90E},CN=Policies,CN=System,DC=DEN,DC=TVG,DC=LOCAL. The file must be present at the location <\\DEN.TVG.LOCAL\SysVol\DEN.TVG.LOCAL\Policies\{D25FE004-C698-4097-BB39-0E3ACD0BC90E}\gpt.ini>. (Access is denied. ). Group Policy processing aborted. DFS and TCP/IP NetBIOS Helper is started on all of the servers. Query Results Forest Domain - Works on both DCs Child Domain 1 - Works on both DCs Child Domain 2 - Works on one DC but not the other DC Child Domain 3 - Does not work on either DC I found the following help document, but I'm not sure how to make this change, nor am I excited about messing in the ADSIeditmmc if I don't have to. Has anyone run into this problem and successfully fixed it? I'm pretty sure things are corrupt from upgrading to 2003, but I just don't know how to fix it. http://support.microsoft.com/kb/896...