Use the GPMC or GPResult
This will tell you what the effective policy is on the machines that are
being enabled. It sounds like there is a policy *** out somewhere
between your computers and your default domain policy that is countering your
instructions. If it isn't immediately apparent then post your results and
I'll take a look.