So, this is a question I think I already know the answer to - are the dynamic local user policies for eDirectory users only, i.e. those that have logged in via the NWClient?

We're running Zen 10 in a pure AD environment, so there's no NWClient any more for us. It'd be nice to use the new granularity of the policies to do some clever stuff.