While testing policies we're looking at the following scenario and wondering what should happen by design in the following scenario (the bits I think I know in green, uncertain ones in red)

User has a Windows (local) policy applied via ZCM
User has a DLU policy applied
User logs in - group policy applies
Users logs out - group policy resets to defaults?
User logs in but with the Workstation only login ticked
Which policy (if any) does the user get now?