...
If Lock user session or Lock user session and card is selected, then you have to specify the value of Timeout before locking the user session, 5 seconds max.
To enable Agent tracking of user session association to connected device, enable Enable user card binding. If Agents and devices are supposed to be used on workstations beyond the domain of your organization, then you have to enable the Consider user card binding on PC that is not joined to domain option.
Define the message to be displayed to user in case of assignment violation, as well as the action to be performed by Agent.
...