Your rule is correct and it should work (unless a user is represented not by a RegularUser, but some other object in the SystemUser group). It would be better to use LoggedInSystemUser.AccessLevel <>'Administrator'
Check the Tomcat output - it should have diagnostics on how the system evaluates this condition. Maybe you have misspelt something.