Do you mean when you move users to a new OU it won’t work? Use the Group Policy Management Console to model the policy results. What does your policy do? Also, remember the default domain policy in 2000 servers has a tendency to override downstream policies. Personally I think Deep Freeze creates more effort than it saves. If you use policies correctly it’s entirely unnecessary.