I have a GPO that is used for disabling USB storage on XP machines. There is a security filter set up such that only computers in a specific group (named "Disable USB Storage") are supposed to get the policy.
I'm using the AGPM 4.0 console since we have a mixed Win7/XP environemt. Anyway, when I deploy the policy, security filtering is changed such that the group "Disable USB Storage" is deleted and the setting is changed to the default of "Authenticated Users". The behavior is repeatable.
This behavior only happens with this one policy. I even tried deleting the policy and creating a new one, but behavior is the same.
In order to manage USB storage on XP machines, I had to import the ADM template for managing usbstor.sys. Could it be the ADM template that is the root of the problem?