New policies start un-approved — nothing is blocked until you approve it (human-in-loop). Blocking applies only to disclosed, company-owned PCs and the employee sees a “blocked by company policy” notice.