I am in the process of re testing all my work with GPO's. I need to be sure that I am blocking all GPO's so that I can slowly re introduce them until failure. I also have a Microsoft consultant working from my site next week (for another reason) but has agreed to take a look.

If/when i have a solution I will post it here.

Thanks for continued interest.