I have an executable file in my sandbox ATI2evxx.exe. It shows as partially limited and trusted. But yet I get prompted every time I boot, and it will not leave the sandbox. I have submitted said file, and trusted it.
You may need to change the security policy to Installer or Updater.
Go to Defense+ → Computer Security Policy. Click the Add button. If the .exe is currently running, click Select, and choose Running Processes. Click on the name in the list and click the Select button. Choose Installer or Updater and Apply. If the .exe isn’t running, Browse to the files location and choose the predefined policy as previously mentioned.