GPO not being applied to different users in a group

hello,

i have gpo asigned terminal server provides desktop lockdown user group(security group universal), gpo filtered wmi filter server , in it's decurity filtering there's said group selected(i check scope , has apply policy).

group member of remote desktop users, users inside normal "domain users".

the problem i'm having quite weird, create user "user1", assign group, logon , policy gets applied correctly.

but if take existing user "userold", policy ignored when gpresult shows executed in list.

rsop modelling shows same result both users(i've tested others well), i've tested enabling enforcing , changing gpo order, result same.

i've tested deleting user folder, no avail.

any ideas?, getting problematic it's allowing locked down users whatever want , have no way of knowing(as simulation give ok) if works unless user report or test eeevery 1 of accounts in group 1 one

 

os win2003r2 32b.

any ideas appreciated

i solved leaving ts user profiles alone, , using folder redirection needed users secure unwrittable location, trick....

 

Windows Server  >  Group Policy