I had a similar issue, which may help others.

Running a 2008 server, you must install Windows-KB943729-x86-ENU.exe onto older clients so as ther new group policies can apply correctly. This can be...