Sorry for obvious answer , on the Policy are you sure you have selected the drop down in the top left and selected 'server' rather than 'workstation'?
Caught me out a few times.
yes i have set both the server and workstation on access policy to be completely disabled for vmware. But on the clients and servers some are still showing as enabled. One server is especially annoying because the report keeps filling up the logs and in the end i will stop looking at it and might miss something important.
I know the policy is updating because if i make changes to for example the password that locks the interface then force a policy update, then it changes the password but the access protection policy does not change.
Do you have a 'Modify Policy on Single System' applied Access Protection policy that is breaking inheritance and overriding changes made to the group applied policy?
Nope they are on the My Default policy and it is inherited from the My organisation node.
I have tried several times to force a policy update but the policy won't take.
Windows 2008 r2 standard 64bit