GP applying to some no others (redux)

[Monty Slayton]

I realize this issue has been mentioned many times but maybe someone can
shed a light on something specific I found. DNS is right. RSOP.msc shows
everything as being correct but let me use a specific example: Testuser1
works fine in all ways and specifically has no icons on his desktop as this
is disabled in GP. Testuser2 has IDENTICALLY the same settings, rights,
roaming profile settings, is a member of the same OU, etc. but his icons
show on the desktop. This is not the only discepency between the two, just
one example.
The only thing I can find in running GPResult is that there is an NA entry
where the GP was last run under User settings (for Testuser2) while computer
settings has the time of the last reboot. Event logs are clean. These are XP
machines on a W2K server. Many W2K machines are working correctly.
Any ideas?

 

[Monty Slayton]

I should add that both of these users are logging onto the same machine and
Testuser1 DOES have the date and time the User GP was applied.