The vendor has published 2 unique mention(s) for this bug: 1. When configuring an app access control rule to hide an application from certain computers, in addition to those computers, you must configure at least one OU for the assignments. If not, the rule applies to all OUs—the application is invisible to all computers in your domain. Example: The assignments of an application include computers A and B and don't include any OUs. The application is invisible to all computers in your domain. The same issue occurs when you configure rules to hide an app from certain OUs. In addition to those OUs, you must configure at least one computer for the assignments. If not, the rule applies to all computers—the application is invisible to all computers in your domain. Example: The assignments of an application include OUs X and Y and don't include any computers. The application is invisible to all computers in your domain. 2. When configuring an app access control rule to hide an application from certain computers, in addition to those computers, you must configure at least one OU for the assignments. If not, the rule applies to all OUs—the application is invisible to all computers in your domain. The same issue occurs when you configure rules to hide an app from certain OUs. In addition to those OUs, you must configure at least one computer for the assignments. If not, the rule applies to all computers—the application is invisible to all computers in your domain. Latest urls for this bug: 1. https://docs.citrix.com/us/en/profile-management/2303/whats-new/known-issues.html 2. https://docs.citrix.com/us/en/profile-management/2305/whats-new/fixed-issues.html