Well has the policy already been applied? I mean, what you’re describing is the default setting (the tray icon being “deaf”). It takes some time to propagate to the clients (a POP interval, i.e. 5-15 minutes)