OK, I have created a group policy which I want to apply to a specific group of computers. The policy has a few settings, adding printers for windows 7 and removing the last user logged on. loopback is enabled with merge in the policy. I remove "authenticated users" from the filtering. Background, I created a security group (in active directory), called "news". I added certain computers to this group. So i add "news" to filtering (it shows domain\news) down there. If you go under permissions it looks like the systems should have the correct permissions to apply it, but when you run gpresult it shows denied, security. The only way i can get it to apply is put authenticated users back in there, which then applies to everything, which I don't want! What am I doing wrong? I'm sure it's a stupid oversight.