is there a trick to including these settings in a zcm 'windows group

i've enabled the 'interactive logon: do not display last user name' via
a device-assigned group policy but it's not in play on the workstations
(hklm\software\microsoft\windows\currentversion\po licies\system\dontdisplaylastusername
is still 0).

the policy is set to 'apply all settings' for computer configuration.

i do have a user-assigned policy but it's only configured to apply 'user
configuration' so it shouldn't be overwriting settings delivered by the
device-assigned policy...