Question : Cannot re-enable firewall with group policy

Server 2003 domain controller.  XP pro SP3 clients.

I was experimenting with GP to deactivate and then re-enable both firewalls on an XP client.
So I made 2 policies.

The 1st  policy disabled     both the domain and standard profile firewalls.
The 2nd policy re-enabled both the domain and standard profile firewalls.

I applied the 1st policy to disable, whilst logged in on the client as domain administrator.
Within a few minutes the policy had been implemented, with the resulting greyed out on\off buttons on the firewall.  Very happy.

I then removed the 1st policy and just waited thinking that it might become enabled again after a few minutes, but nothing happened.

Then I applied the 2nd policy to enable the firewall and waited some minutes, but nothing happened.

I used gpupdate /force /wait:100 on the server.  Nothing.
I used gpupdate /force /wait:100 on the client. Nothing
Rebooted the client and logged in as both local admin and domain admin.  Both firewalls are still disabled.

Why does group policy not work here?

I was hoping to use this GP firewall function on many clients.  Now I am very reluctant.  Is this a buggy GP.

Answer : Cannot re-enable firewall with group policy

Run RSoP.msc on XP machine and check if your blocikng policy is really removed :)