Desktop Security Configuration not applying

Desktop Security Configuration not applying

Hello,
I have two machines that auto login with their own user account. I created a security configuration in DC that is suppose to prohibit the users from altering, adding, deleting or editing items on the desktop. However, after having the agent apply the configuration manually and waiting for the 90 minute interval to refresh it seems the configuration has not applied.
 
I set the config. to apply to those machines and those two users. I've added the DC agent as a security risk exception in Symantec Endpoint Protection. But it still won't apply. All of the other agent settings and server settings apply but this configuration won't.

                  New to ADSelfService Plus?