Make sure that the client you are configuring is not whitelisted. Try finding the client you are testing with by navigating toNetwork-wide > Monitor > Clients, opening their client page, and making sure their 'Policy' is not set to 'Whitelisted.'
Also you may try a packet capture which testing. I am betting there are other URLs that need to be blocked. Below is a link with what Google defines as the Drive URLs