I have several policies setup that restrict several things like changing IE homepage etc. I also have several users that run spy-bot and ad-aware on their local PC's and I also use it on my Terminal Servers. I noticed that both spyware programs see the policy and remove it as a threat thus allowing my users to change their settings. I am then having to manually update something in policy to enforce the setting again and do a gpudate. I thought that the policy should get enforced again when it automatically updates but this does not seem to be the case and I have to change something in the policy to force it to take affect again. Has anyone had this issue before and if so how did you work around it? Or is there a way to make the client take the policy again on a refresh rather than me having to change something and force a gpudate?