I'm seeing the following issue with RU5 with Windows 7 clients:
1. On a fresh Windows 7 install, install the SEP client from a silent installer with group policies that have an active system lockdown or application control policy.
2. Reboot the client so that Application control can be activated.
3. Varify that the Application control/system lockdown policy has downloaded to the client.
4. Try to open a blocked/unapproved application on the client.
5. The application opens. The policy is not applied.
This happens every time I install SEP onto a new client. The Application control/system lockdown policy will never take effect until I 'touch' the policy in the SEPM so that it creates a new serial # and repushes the policy, after which it will apply properly on the client. I can wait for hours, reboot as often as I want, but the policy will not apply until it is updated in the SEPM.
I already have a case # for this: 281-851-888, but just wanted to share my experiences, and I was also curious to know if anyone else has seen this.