[1709, fcu] applocker preventing admin user from install programs

[chazzy2501]

I'm setting up a 1709 win 10 edu build for summer deployment.

 

I'm using applocker for the first time (I've used SRP in the past) I've enabled the service created the default rules and set enforcement.

 

One of the default install rules allows admin users to install from anywhere. This is not working as expected and blocks my domain admin user from installing programs from a network path.

 

The error in the event log reads: "is not permitted software restriction policy" (but I have none set, checked gpresult) is that normal for an applocker events?

 

I've redundantly added the network path as an allow rule for installers but this didn't help... [now deleted]

 

the error 1007 "...only allows installation of unrestricted items..." "the authorization level returned....was 0x0"