The settings were not applied, as I thought they would be, only to sessions started on these tagged machines, but instead to every session, whatever the delivery group or user used (the evidence was easy to spot as I also setup session watermarking in this new policy).