Such limitations are of course possible. Perhaps you should look up what you can achieve by running secpol.msc. (Myself, I find that model complex and unintuit

Such limitations are of course possible. Perhaps you should look up what you can achieve by running secpol.msc. (Myself, I find that model complex and unintuitive, being used to the Unix way, but everything has its learning curve.)