If you do

start-run-mmc

then add the 'security configuration and analysis'
and 'security templates'

you can then apply the compatws template (compatable workstation), but if you have been doing lots of manual stuff it will not help much, just sets the local group policy to a more compatible level.

But you have sorted it anyway now, still just thought I would mention it in case anyone lese has a problem