WORK-SERVER: W2003R2Term+NWclient+ZCM10.2.1 (without AD)

Steps:
1)
In the other TEST-SERVER W2003R2+AD create WGP (disable run
c:\Program File\Far\Far.exe
From this TEST-SERVER log in to the ZCM and create WGP: SRP_TEST
from this Policy from the AD
(*) Enable the enforcement of this policy
(*) Active Directory Group Policy
[ ] Computer configuration
[+] User configuration

This WGP for my user from eDIR: team2.
+Create Policy DLU for Team2 (not volatile)

2)
After this Log (localy only) as Administrator to WORK-SERVER.
zac cc
zac ref

3)
After this log to the WORK-SERVER as Novell-ZCM-user: Team2
Log - OK..
But user TEAM2 can Far.exe :(

At this time in the ZCM for the Policy SRP_TEST i see this error:
"There was an error while enforcing the policy "srp_test". Please refer the managed device log for details."

4)
After this reboot WORK-SERVER and AGAIN log in to the server (novell-zcm) as TEAM2 and:
4.1: User Can not run FAR.EXE - this is good , but...
4.2: In the ZCM i see this error again and in the ZCM-icon (under the term-wndows team2 session) | Show Properties | Policies i see error:
srp_test Failed


What can i do ?

Any body ave this error too ?

Serg


There was an error while enforcing the policy "srp_test". Please refer the managed device log for details.