Please be aware of security policy support for the following types of sessions:
Remote Sessions: The Endpoint Security Agent does not support user-assigned security policies in remote (non-console) sessions. Only device-assigned policies are applied when logging in to a remote session.
Fast User Switching Sessions: The Endpoint Security Agent does not support user-assigned security policies on devices when Fast User switching is used (that is, switching between user accounts without quitting applications and logging out). On devices where Fast User switching is employed, you should use device-assigned and zone-assigned policies only.