after trying both GPO Registry keys, GPO Templates, and direct registry keys, I can say that for this customer it it consistently inconsistent; resynch from wem console, refresh cache, reboot, refresh again, reset settings, results all over the place; moved to AD GPO, consistent every time...🫤