We're looking at ZCM to manage a Windows 7 SP1 deployment (as an upgrade to ZfD7 managing XP) and are having a number of issues with the policy side of ZCM.

1) Policy compenents fail on initial logins. Serveral logins are needed before the policies will apply. In the Agent
properties some items show as failed, some show as success but still haven't applied until a subsequent login
2) Policies don't 'un-apply'. e.g. user with a policy logs in and the policy applies. A subsequent login as local
administrator or a user in the user source with no policies but the policy from the old user is still active

Environment
- ZCM 11 with cumulative agent update 2
- Server is Windows 2008 R2 Standard SP1
- Clients are Windows 7 SP1 with patches applied from a local WSUS server
- User source is a single Active directory source with multiple servers configured for that source.
- DC's in Active Directory are Windows 2003

For issue 1 here is an outline of the observed behaviour

Test Case 1
User: Test User from AD User source

Policy Applied: Policies > Student Policies > User Policies > Start Menu and Task Bar
The policy simply configures a few start menu GPO options

Machine: Devices > Workstations > Development Workstations > demomachine1
Machine OS: Windows 7 SP1
Agent Version: 11.0.0.41501 with updates from cumulative update 2
Machine is VMWare VM with the image and ZCM agent installed then snapshoted


1) Machine was reset to snapshot
2) First login - policy doesn't apply, ZCM agent reported policy failed. ZCM Message log contains "The action [NULL] (ID:grouppolicy) failed due to the reason : grouppolicy, however the action is set to continue on failure."
3) Second login - policy doesn't apply, ZCM agent reports policy success ZCM Message log contains "The action [NULL] (ID:grouppolicy) failed due to the reason : grouppolicy, however the action is set to continue on failure."
4) Third login - Policy applies

Any help would be welcome on this.

Thanks.

-Mark