Software restrictions-except Local admins

[madcyryl]

I am looking to apply a software restriction policy through a gpo and link it to all the workstations on the domain. I have done this and applied it and a test workstation is picking up the gpo......except for a couple of settings i have chosen such as:

 

enforcement properties- apply software restrictions to all users except local admins

 

Security level is set to disallowed - software will not run.

 

These settings are not applied, when i run rsop.msc on the target machine i see the path rules i have set up being applied but not these two settings.

 

Any ideas?

 

Thanks in advance.