Group Policy enforced on desktop

["Cheek, Leigh" <lcheek () UTK EDU>]

Group Policy Gurus,

I am auditing a desktop with MS Windows XP Pro operating system with a
nice group policy applied to the organizational unit. When reviewing the
computer, the group policy appears to enforce a Security Options setting
which is only found in XP, W2k, and W2k3. However, when I reviewed the
group policy the setting is not listed. The XP Pro default setting is
recommend by the CIS benchmark and NIST checklist, but the machine has a
weaker setting enforced which we cannot locally change because of AD.
Please contact me directly if you wish to know the setting.

Has anyone seen this before and have any explanation? I assume to
correct the group policy will need to be rebuild from scratch. 


Thanks,
Leigh Cheek, CIA, CISA
Senior Auditor
Audit and Consulting Services
University of Tennessee
149 Conference Center Building
Knoxville, TN 37996-4114
(865) 974-4420
fax (865) 974-6171
lcheek () utk edu