NTLM Blocking on Windows 10 21H1 breaks some group policies, specifically allow/deny log on locally

 I'm struggling with blocking NTLM outbound from workstations, as it appears that some group policy processing, specifically the user rights assignments, requires it.  I've been able to replicate thi...