I created SPR rules and made them "disallowed" on my office PC, XP. I have done all necessary steps, allowing to run only from Windows and Program Files, path rules. I've done it on my PC with Win-7 and they work. But on my office PC, XP I can run any installer from the desktop. Obviously they don't work. What's wrong?