I created a new policy that creates a new local user on the target device. Which works, I can see it in system preferences and I can see the newly created user folder in /Users but when I try to logon it says the password is wrong.
JUST to make sure I was not making a typo I created a policy that makes an account called test with password test and still no joy.
Am I missing something?