I have moved your post to the "Total Protection Service" forum for better attention.
Do you have ePO in place to manage these systems as you could add in exclusions for whatever is being blocked.
Another option would be to run a gpupdate /force in a login script, or if you are using a 3rd party software deployment tool like SMS/Configuration Manager/ Altiris etc.
It I altered your user name to eliminate your email address for your own privacy and safety.
I suggest you to please log on as Administrator in the console and click on View Application list.
Once there, please click on ADD/ ALLOW A Program. Then manually add the GPO executable and all the other files necessary for the operation to complete and save the settings.
Please revert if it helped.