Whether in the clients Network threat protection is installed?
This feature in the client is req. for the changed what you done get effective.
If you are having this feature installed try by keeping this rule in the top.
Also assure that the clients are in server control mode .(In SEPM clients---> <prefered group>--->policies (right side)--->location specific settings--->Client User Interface Control Settings