The policy for restricting the launch of programs in the domain is not applied, what should I do?

Question

Active Directory

The bottom line is that there is a domain and an OU in it, and a computer brought into the domain and all users are placed in the OU. I created a group policy object, registered prohibitions on running programs and scripts there (I did it following the example from here - winitpro.ru/index.php/2016/10/21/blokirovka-viruso... )
I go under the right user, I do gpresult / r, I see that the prohibition policy has been applied, but the programs were launched with, for example, AppData, and continue to run. I tried to prescribe the same rules in the User Configuration, the result is the same. Where could be the problem?