diff --git a/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml b/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml
index a0b5858..bded817 100644
--- a/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml
+++ b/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml
@@ -20,7 +20,7 @@
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_BASH" FriendlyName="bash.exe" FileName="bash.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_CBD" FriendlyName="cdb.exe" FileName="CDB.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSI" FriendlyName="csi.exe" FileName="csi.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSCRIPT" FriendlyName="cscript.exe" FileName="cscript.exe" MinimumFileVersion="5.812.10240.0" />
@@ -1393,4 +1393,4 @@
   <UpdatePolicySigners />
   <CiSigners />
   <HvciOptions>0</HvciOptions>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>
diff --git a/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml b/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml
index 6365af6..1d92041 100644
--- a/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml
+++ b/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml
@@ -89,7 +89,7 @@
     <Deny ID="ID_DENY_ADDINPROCESS32" FriendlyName="AddInProcess32.exe" FileName="AddInProcess32.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="65535.65535.65535.65535" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_DBGHOST" FriendlyName="dbghost.exe" FileName="DBGHOST.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DBGSVC" FriendlyName="dbgsvc.exe" FileName="DBGSVC.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DOTNET" FriendlyName="dotnet.exe" FileName="dotnet.exe" MinimumFileVersion="65535.65535.65535.65535" />
@@ -539,4 +539,4 @@
       </Value>
     </Setting>
   </Settings>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>
diff --git a/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml b/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml
index a0b5858..bded817 100644
--- a/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml
+++ b/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml
@@ -20,7 +20,7 @@
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_BASH" FriendlyName="bash.exe" FileName="bash.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_CBD" FriendlyName="cdb.exe" FileName="CDB.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSI" FriendlyName="csi.exe" FileName="csi.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSCRIPT" FriendlyName="cscript.exe" FileName="cscript.exe" MinimumFileVersion="5.812.10240.0" />
@@ -1393,4 +1393,4 @@
   <UpdatePolicySigners />
   <CiSigners />
   <HvciOptions>0</HvciOptions>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>
diff --git a/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml b/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml
index 6365af6..1d92041 100644
--- a/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml
+++ b/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml
@@ -89,7 +89,7 @@
     <Deny ID="ID_DENY_ADDINPROCESS32" FriendlyName="AddInProcess32.exe" FileName="AddInProcess32.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="65535.65535.65535.65535" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_DBGHOST" FriendlyName="dbghost.exe" FileName="DBGHOST.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DBGSVC" FriendlyName="dbgsvc.exe" FileName="DBGSVC.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DOTNET" FriendlyName="dotnet.exe" FileName="dotnet.exe" MinimumFileVersion="65535.65535.65535.65535" />
@@ -539,4 +539,4 @@
       </Value>
     </Setting>
   </Settings>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>