TMG Client and application exceptions

Hi fellas

I'm trying to roll-out TMG this week and we have a desktop app that is trying to connect to a local webserver yet the FWC intercepts this traffic and fails thru TMG.

We added the app executable name to the exceptions in TMG and it is working on some workstations but not all. 

Any recommendations on why these changes are not coming down to all of the firewall clients?

Thanks!