We have several Terminal Services users on a Windows 2003 terminal server, with a GPO setup to remove all icons from the desktop. This GPO is applying correctly to several of the users, but is not applying to two other users with identical group memberships to the users that it does apply to. We have run the two users it fails for through the GPO Modeling and Results wizards, and found no issues there. If we add the users to the Domain Admins group, their desktop icons go away, but if we remove them from the group again they come back. Any suggestion on what could be causing the GPO to fail to apply correctly are welcome.