I still suggest "my" solution. cause it was the one given by MS. ;\)
just in case you should see the effective policy for logged in user.
_________________________
!

download KiXnet