Activation limits not working for groups. In the ACE policy editor, Allow multiple activations per user is not selected by default. When you create a managed ACE master (with Active Directory), open the policy editor and add a group without selecting Allow multiple activations per user. ACE will still allow a user from the group to perform multiple activations of ACE instances.
Solution
Add users directly in the policy editor (not in a group).
