Make sure that the members of group A are also not members of group B. Keep in mind
that there are two parts to Group Policy - computer and user. If you are trying to
"filter" computer configuration by user groups it may not work and domain
password/account policy will apply to all users in the domain even if you try to den
that policy to computers or users. Gpresult is a very helpful tool in seeing what
policies are applied to users, from what GPO, and when last applied. It can also take
up to twp hours for Group Policy to apply to domain computers and users. Using
secedit to refresh policy as shown in the link below can speed it up if done first on
domain controllers. Otherwise a reboot for configuration and logon/logoff, possibly
twice, will refresh policy for domain users. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;227302