Hello people: First, excuse any misspelling, english is not my mother tongue I'm triying a simple gpo, put a fixed image as wallpaper on all the pc connected to the dc but is not working. Using the remote administration tool had has defined an Organizational Unit with one user and defined a policy with two restrictions 1) use a shared image [ \\dc\common\backgroud.jpg ] as wallpaper 2) disable change of wallpaper by the user the same restrictions are applied in the default domain policy BUT IS NOT WORKING Login with a user inside the default Users group or a user from the OU created is the same, wallpaper goes with the XP default and not the image i put on \\dc\common\backgroud.jpg the test is done with a phisical pc as domain member and a server over a virtual machine with debian wheezy (proxmox container) some data for have an idea on scene #samba -V Version 4.2.0pre1-GIT-UNKNOWN #uname -a Linux dc 2.6.32-20-pve #1 SMP Wed May 15 08:23:27 CEST 2013 i686 GNU/Linux #samba-tool gpo listall GPO : {31B2F340-016D-11D2-945F-00C04FB984F9} display name : Default Domain Policy path : \\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9} dn : CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com version : 0 flags : NONE GPO : {6AC1786C-016F-11D2-945F-00C04FB984F9} display name : Default Domain Controllers Policy path : \\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9} dn : CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com version : 0 flags : NONE GPO : {000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60} display name : shop01 path : \\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60} dn : CN={000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com version : 131072 flags : NONE GPO : {6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC} display name : infor1 path : \\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC} dn : CN={6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com version : 65536 flags : NONE besides there is a strange error with aclcheck # samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/gpo.py", line 1150, in run ds_sd_ndr = m['nTSecurityDescriptor'][0]