Policy changes not applying to machines