Vista Power Management GPO

I've created a loopback GPO that has several settings (both computer and user) including a Custom User Interface (Access 2007 Application) and Power Management (has the computer sleep after being idle for 2 min). I'm also filtering so that this policy does not apply to "Admins" - only to "Users". The problem I'm having is when the "Users" login the Power Management settings don’t work, but they do for "Admins". For testing I'm allowing the "Users" to launch Task Manager and use the Run line, so I'll run Explorer and look at Power Management and it shows the settings from my GPO. So I created a test OU with copies of the aforementioned GPO, but removed the Custom User Interface and found the Power Management settings do work for both the "Users" and "Admins". When I add the Custom UI the Power Management settings break for the "User" but continue to work for "Admins". Do the Power Management options need to have User Interface be "Explorer.exe"? Is this a bug or am I doing this the wrong way? BTW the tablets are using Vista SP2.

Any insight or advice would be greatly appreciated.

Thanks, Matt

Solution 1:

As you mention it working in a different OU created for the tests, I'll ask a really stupid question -

You haven't got permissions set wrongly on the GPO object have you? IIRC to apply it you need the apply and the read permission.

It feels like a lame thing to ask, but it does seem like you're locking stuff down heavily and its easy to go one step too far with that, goodness knows I've done stuff like that before now.