I have been fighting with ZCM for about a year now and for the most part like what I see. But the major hurdle has been group policies. I am at a school district so we have teachers and students often logging into the same machine and needing different policies. Here's what problems I'm seeing.

Staff user logs in, gets staff group policies.
Log out and back in with student account. Staff policies stay in place, but in GPEDIT.msc it shows the student policies there. Adaptive agent shows that the student policy has successfully been applied.
Running a ZAC pr does apply the correct student policy, but also a message pops up saying that new policies have been applied that require the user to log out and back in.
I have seen this with 10.1 and 10.1.1 I have tried this with a server that was upgraded from 10.0 to 10.1.1 as well as uninstall zcm and reinstall 10.1 directly and then upgrade to 10.1.1 to see if it was the upgrade from 10.0 to 10.1 was the problem. No luck. I am currently only applying user policies only. Any suggestions?