What does gpresult from a client come up with? Check the client event log to see if any messages regarding policies are being flagged up. Is it happening for specific users or iscolated to particular machines? Try removing the profile from a student and check whether policies reapply. Is this happening to both staff and students?