I have a windows standard server 2003 with active directory. somehow ( i can't confirm this but after i moved symantec endpoint protection manager from this server to another server ) lately the group policies have gotten messed up. I have a few different OU's with different group policies in each group. In the main OU there are no policies prohibiting going into control panels for instance, however, now everybody can't get into control panels. if i log in to the local administrator i can get into my control panels. I think this is a active directory problem because some of the OU's have the restrictions that is affecting everyone now. I looked at my domain controller and attached an event in the directory services event log.