I've ZCM 10.2 on linux.
My Workstation are all WinXP

I've create 2 types of DLU Policy:
1 named "DLU Policy Users Group" that assign users in Win Users Group
1 named "DLU Policy Administrator Group" that assign users in Win Administrator Group.

The policy is assigned to 2 different eDirectory Groups, one for DLU Users Group and one for DLU Administrator Group.

If i move a edir user from Administrator group to Users Group, ZCM Agent report a correct implementation of the "DLU Policy Users Group", but the user is logged in like administrator.

Do you have experience in same problem?