I have found that the policy will fail for some users if when they login
for the first time they can logout and logback in and it wont have any of
the restrictions. is there a way to fix this, as they do this every day.