I'm trying to get rid of that second login prompt and figured it was the DLU policy. I created the Policy and assigned it to the device. ZAA properties show it as being Effective but it still doesn't work. I'm on a 10.0.2 server with 4.91sp4 client. The client login is fine, but I don't see anything that even suggests a DLU is in place or effective other than the ZAA saying it is. I've looked around here but couldn't find anything that applies. Does anyone have any ideas? Thanks