Interactive logon GPO not applying

[clareq]

I successfully imaged over 1000 computers this Summer with no issues. However, the last three machines I've imaged, from the same fat image, using the same task sequences in SCCM, have the same issue. The parts of the default domain policy that controls the log on screen aren't applying -

 

Interactive logon: Do not display last user name Enabled

Interactive logon: Do not require CTRL+ALT+DEL Enabled

 

I've tried creating a new GPO with only these two commands, but that doesn't work either. If I set the commands in the Local Security Policy on the workstation it holds. Trying to run gpresult /scope machine gives access denied.

 

Any ideas?

[clareq]

bumping...

[Valsh]

There's been a few times in the past where I've had access denied with gpresult, running cmd as admin solved it(despite already having administrator rights).

[clareq]

I've returned from holiday, and am revisiting this. Running gpresult with an elevated prompt works, and I now see that the policy is, apparently, being applied. However, I am still being prompted to press CTRL+ALT+DEL - this used to work, and I'm sure I haven't changed anything. Any ideas?

 

UPDATE I've just made a change to the GPO, and gpresult sees the change, but doesn't apply it. What's going on?

Edited October 5, 2015 by clareq

[clareq]

Fixed it - a corrupt software restriction policy. Recreated that and everything else worked