Settings not pushing on first login

Hello,

While my server works great otherwise, anytime a user logins into a computer for the first time (on that computer), they have fully unrestricted access to everything, and must log out and back in to push the settings. I am concerned as this is a security issue, and I have had recent encounters of users exploiting this "bug". If anyone could tell me how to fix this, it would be greatly appreciated.

Thank you.