@DennisM 

The parental controls are working or rather should be working but not in the way you are trying to use them.  First the keywords are based on website urls, not applications so for instance blocking youtube will only block youtube on a webbrowser not the application on a phone.  Next the time time limits.  When you set time limits the green blocks are when the rules will be active.  Outside those block hours the rules will be unrestricted access.  Finally the time is based on the router's time, so if that is off so will the times that the rules are active.  That could be why when you whitelisted Microsoft.com that all sites were still accessiable. 

@DennisM 

Just to let you know that theere are 3rd party partental control devices like Circle that have more robust control features that include app blocking.  I too wish our parental controls were more functional and on some of our products do, sadly product such as yours that are end of life will likely never see these changes.  But there are defianlty some 3 party devices and apps that can do what you are seeking.