I am looking to apply a software restriction policy through a gpo and link it to all the workstations on the domain. I have done this and applied it and a test workstation is picking up the gpo......except for a couple of settings i have chosen such as:

enforcement properties- apply software restrictions to all users except local admins

Security level is set to disallowed - software will not run.

These settings are not applied, when i run rsop.msc on the target machine i see the path rules i have set up being applied but not these two settings.

Any ideas?

Thanks in advance.