New
#170
It seems that the new 1903 feature called "Tamper Protection" was running interference. Disable that, and I think you'll find that the policy works as expected.
When MS said that Tamper Protection "prevents others (including malicious apps) from changing important protection features," they apparently were including their own controls (i.e. policy).