I have not used it myself but MS does have stripped down version FAZAM, at
http://www.microsoft.com/windows2000...azam2000-o.asp Or you can run Gpresult, download from MS, on the local machines you are having trouble with. It will give you a list of all group polices applied to a certain machine and there settings. I have used this one before works pretty good. Remember once you change GPO you can run gpupdate /force to apply to change w/o having to wait for it to update.