Device Control - USB blocking

I’ve been managing a policy for blocking USB devices except for approved ones. This has been fine until lately. Endpoints no longer pick up the policy and fail outright. I’ve tried recreating the action a few times with no success. I can figure out why it is failing. The action script shows everything completes.

To be clear, this is using the Trend Micro integration. All endpoints except 2 fail but I can’t see why. The logs don’t offer much at all.