Group Policy Results wizard Access Denied - which GPO settings stop this?

Greetings,

    We recently applied about 300 computer security settings to implement "best practice" for security hardening. One area that causes grief is that I cannot run the Group Policy Results wizard from the GPMC against machines that have those settings. I can run it fine on those machines that don't have the settings. I am a domain admin.

   I have looked through the 300 odd settings and cannot spot anything obvious that would stop RSOP from the GPMC. I know its not the firewall as we all run the same third party firewall. So does anyone have any clue on which GPO settings would break RSOP from the GPMC?

Thanks

David Z