I have recently upgraded ArcGIS Server to 10.4.
When using manager to lock down a server the change in permissions doesn't stick.
I get a message stating 'Permissions applied successfully' BUT indeed they are not.
Logging out and logging back in...or simply refreshing the page displays an open service.
Any thoughts?