Hi again,
just for clarity, there are no third party blockers/cleaners/testers on these machines -- they're pretty much plain vanilla, with the exception of VLC & Firefox (with eyeTV on a couple of them).
The key point in my last message was:
"The problem is the OS does not persist the local network authorization grant over a power cycle."
I'd suggest that, if you shut down the client machine, and then power it up (with or without Safe Boot), you'll hit the same problem. Firefox reports "can't access <remote web server on local network>". If you then goto the Local Network grant list, toggle Firefox off & then toggle it on again, THEN try the same access on the local network, it works.
I'd contend that this is a bug in Sequoia -- it's certainly a feature introduced by Sequoia that doesn't persist over power cycles.
It confused my users enough I've rolled all the machines back to Sonoma -- my bad for not testing this out, as 'obviously they wouldn't break something that simple'. Sigh. 2024, eh?