Group Policy Settings-Force User Logoff

I’m trying to create a group policy that will allow admins to set logon hours (when necessary) to force a user off the network.

I understand I need to enable two settings on the Computer Configuration Node to accomplish this:

Microsoft network server: Disconnect clients when logon hours expire

and

Network Security: Force Logoff when logon hours expire

We’ve added this to our default domain policy, however, while all other settings work, these two aren’t.

Any ideas on how we can this happen?