Now I feel stupid - GPOs aren't working!!

Okay, I really must be doing something wrong, but I don't think I am. We just recently moved to Windows 2000 and I am trying to set up GPOs in our domain. What I did was created a new OU for the domain. In this OU, I created a few OUs for various groups of computers (different PC labs we have), and OU for "students" and and OU for "faculty". I then moved the necessary computers into each computer OU and then placed the student global group and faculty global group into their respective OUs.

From here, using AD Users and Computers, I right click on an OU (Student OU for example) and choose the Group Policy Tab. I create a new GPO, choose to enable "Disable Control Panel" and then rename the GPO and close it out. I tried leaving it like this and did not work.

So I then clicked on the properties of the Student Global Group located inside the Student OU and chose the security tab, where I chose for the student global group READ and APPLY GROUP POLICY.

Still, did not work!!!

What am I doing wrong?? Is there something else I should be looking at??

The same goes for GPOs I set up for any of the Computer OUs, like enabling the option to "Not show the last logged on user". No GPOs are effective right now.

Thank you all so much in advance!!

Pete