It's important when using Appguard to understand the pecking order. The guarded apps list is stronger than the user space list. So, for instance, if you included powershell in user space, and you also have it on the guarded apps list (it is there by default), then it will not be blocked, it will run guarded. If you want to block it, you need to untick it in the guarded apps list.