right. The user gets all the GPO's for the OU the workstation/terminal server is in. And if loopback is in merge mode all the policies of where the user object resides as well. The workstation OU policies take precedence over the user object's OU.
'People who think they know everything are a great annoyance to those of us who do. '