Hi itsamorey,
I don't know enough about Horizon to quite understand what you're trying to do here, but let's start by examining the DEM agent's log file. Any pointers in the log with regard to how the conditions for Chrome's application blocking config file are evaluated in the different scenarios?