We extended the AD schema in preparation for 2008 and had a IPSec GPO stop working. The GPO or at least the name seems to work thru GPresults but the IP filter settings do not apply/