I have two DC's, one running 2003 R2 SP1, the other running 2003 SP1 both are Standard edition. I'm not seeing any replication errors. If I make a change in AD to a GPO it doesn't change on the other server so say a firewall policy to shut off the XP firewall is implented on one server, but it does not update on the other server even if I go to sites and services and force a replication. Any ideas??? DCdiag won't work on the 2003 SP1 server, says it isn't there. Do I need to install the admin tools or something??