When a Vista client is added to the domain and applies the default group policies, the diagnostic policy service and dhcp service will not start and responds with an Error 5 Access is denied. However, if the Vista client is placed into a separate OU and policy inheritance is blocked the Vista client functions as it should.