cannot log users in to Wyse 5070 ThinOS devices

WMS 3.3

Wyse 5070 Thin OS v 9.1.3129

We need to authenticate our users (via active directory) and then apply user policies to them. This does not appear to be working.

I have run through all types of configurations on the ThinOS 9.x group policy, under Login Experience -> login settings

When a system reboots I can see the legal disclaimer appear as configured, then when this is accepted the login box flashes on screen (only for a second or so) and then the device continues to show the connection manager as if logon is not required. – there is also no sign of a logoff/sign-out option anywhere so I do not believe this is auto signing on.

I have attempted populating the fields in the device policy in many different ways but it does not appear to affect the symptoms, which continue to behave as seen i must be close to having tried every percievable combination of settings by now.

is there something that must be configured elsewhere before this will work? how can i ensure that it's possible to authenticate my users, thus allowing device locking etc etc as well.