The import policy I created uses the "USER" ad part of the naming
convention.

The object gets imported correctly, when I test it as admin.

When I login as a user, the workstation object name does not change to
reflect the last user who logged in from that workstation. i.e. it still
shows up as

admin-ipaddr-macaddr

The user history in the object shows the user names.

The import is configured to happen after 1 login.

What am I doing wrong?