Microsoft Security Advisory MS02-016 - Windows 2000 Group Policy may be bypassed by logging in twice because the first login locks the Group Policy files, preventing Policy from being applied for all users affected by the GPO. Microsoft FAQ on this issue available here.
94a300e3f6bb0343eff76c6525d5ff31fa8862c37a845c01808d273bdad54fe5