UAC, App locker - Local Admin

[Mark182]

We've finally got round to taking local admin rights off staff (Long over due) Also been looking at threads like this I can't seem to figure out the best way to move this forward. Here is our UAC settings configured :- We install our software using SCCM. Two bits of software that I know of are kicking off with UAC :-

 

4matrix is installed but when it tries to update UAC kicks off with C:\program files (x86)\4matrix & c:\users\staffaccount\appdata\local\temp\x.x.x.exe (I've used wildcards * where needed)

 

I have added publisher rules for 4 matrix and path rules but UAC is always kicking off, I have something similar with schoolcomms too.

 

Just after some advice as guess I am missing something somewhere. Using windows 10 and server 2012.