I have not dabbled into GPO's in awhile, my question is straight forward. I created a gpo by right clicking on an OU unit called "test", and made a policy titled TEST , with password policy changes under computer configuration. My test OU has 3 test users (test1,test2,test3), when I log into the domain now as test1 appears the password policy is not applying, example testing password length of 7. I suspect the domain default policy overrides this OU policy? Do i need to use the "block policy inheritance" ? I am also in a citrix environment , and ultimately a policy will be applied to users under the OU to enforce stronger PCI policies. Using MS server 2003.