Windows XP Security Guide - Laptop Policy

I have an environment that I have set up for a customer using the
Windows 2003 Security Guide and enterprise policy settings.  This is all
fine, I have also implemented the enterprise security policies from the
Windows XP security guide.  I have set up both the enterprise desktop
policy and also the enterprise laptop policies + the environment
specific and local account changes.

I have been getting calls from the administrator saying they are unable
to do a few things on the Laptops:

1.      Remotely manage them properly from another desktop/laptop/server
ie. Red X in users and groups, access denied on services, eventvwr etc 
2.      The main one - They are unable to offer assistance to Laptops,
they offer to any of the desktops without issues. 

The firewall exceptions are all correct, even with the firewall disabled
we still get permission denied instantly.  The remote is enabled on the
machine and also via group policy with the correct group populated.   It
seems to be a security difference between the desktop and laptop policy
in the security guide that is causing offer assistance to fail but not
on site and so cant really have a good look.  They are able to RDP into
the Laptops though?

Any help, direction would be greatly appreciated.


Rgds
Dave Adamson


---------------------------------------------------------------------------
---------------------------------------------------------------------------