Trusted User Policy

[mlajoie]

Hi.  I have a specific subset of machines that are in their own subgroup.  To this subgroup, I have the normal workstation application control policy and have added a second policy that has their admin accounts listed as a trusted user.  Unfortunately, users in that group (when using their admin account) are not being allowed to rename or delete files?  This is something they need to do often as part of their administrative duties and these machines are dedicated to this process.

Can we not use a trusted user in this way?  What am I doing incorrectly?

[BenEllis · Accepted solution]

Are the users logged in with that account before added to the trusted users? Did they close everything  opened with that user after the policy was added? 

Did you verify those machines indeed did get your policy? "sadmin updaters list"