Applocker Blocking Allowed Applications

hello! have begun deploying applocker across our network , far has been stellar. however, few users complaining cannot use office. excel or word. have approved publisher certificate microsoft , these users aren't being blocked on other applications allowed. applocker logs report executable blocked life of me cannot find single reason why. 

i created second rule in applocker use file hashes of executables, updated gpo on affected systems , still blocked. if has ideas on possibly root of problem or can begin digging find issue, appreciated.

are there rules deny action level?

---

my weblog: http://en-us.sysadmins.lv
powershell pki module: http://pspki.codeplex.com

Windows Server  >  Security