AppLocker - Can't determine if a user has permissions to access application XYZ on the server
This issue is typically present when the AppLocker rules contain users placed directly in the AppLocker rules, instead of users being placed into AD groups, and then AD groups into AppLocker rules.
To resolve, modify the AppLocker rules to only include AD groups, as per above.