Windows 95 And Microsoft Plus Osr2.5 (oem) (iso)

Policy in Intune successfully applied to test machine.
However it blocks all installations, if I try Run as administrator on some .exe file it is blocked but I only wanted to block installation of WinRAR.