Question : Group Management OU Policies

I created an OU for Programmer Laptops and I'm trying to create a policy to apply which allows Laptops under this OU to have, amongst various other options, access to the Control Panel.  

To test, I moved a Laptop from the 'Computers' OU into the new 'Laptops' OU and created a new policy: 'Laptop Policy' with a couple of settings defined under Computer Config and a couple under 'User Config'.

I see that the Link Precedence is '1. Laptop Policy' and '2. Default Domain Policy'.   Running RSoP (Logging), it seems that the policies I set under the 'Computer Configuration' get applied but all those under the 'User Configuration' do not?

All settings under the User Configuration are the Default Domain Policy and the Laptop Policy ones seem to be ignored.

What am I doing wrong?

Answer : Group Management OU Policies

Are there user settings in the laptop policy.  If there are only laptops in that OU then the user settings would not apply to any GPOs linked at that level.

If you want user settings applied to machines like that you would need to use loopback processing.  (generally done for kiosk or terminal server boxes)

Good loopback overview here:

http://sdmsoftware.com/blog/2009/01/06/please-explain-loopback-processing/

Thanks

Mike