Autopilot fails "Account Setup -> Apps (Error)" after implementing AppLocker
Recently I have implemented AppLocker to prevent unauthorized user installs. I have noticed that Autopilot will now randomly fail when installing apps due to the blocking apps in the ESP. It seems to fail on 1 out of 3 computers. I also noticed that OneDrive silent sync has stopped working. When the user signs in it will say "Your IT department has back up your folders" but it does not actually open the OneDrive application and sync anymore. You have to open OneDrive before it automatically signs you in and syncs.
It always seems to fail on 0 out of 3 apps. It never seems to fails halfway through when installing the blocking apps. I never get an error code when it fails. When it fails, it says "Apps (Error)". I allowed users to click "continue anyway" and it seems that all the apps are installing correctly. The apps are not blocked when opened. If I open event viewer and look in Application and Services Logs\Microsoft\Windows I do not see any of my Intune apps being blocked. Microsoft News is the only app that shows blocked in event viewer. This is intentional.
I have the default rules set for EXE, MSI, and Appx. I removed 2 out of the 3 blocking apps from ESP. I have an explicit allow exception for the one app that I have left. I also have an explicit EXE allow for anything signed by Microsoft.
I have tried looking at the Autopilot diagnostic logs but I am not sure what I should be looking for.