User group policy not updating
Despite the name “Authenticated Users” actually includes both logged on users but also computer objects from either the same domain or a trusted domain.This means that a default GPO will be applied to all users and computers located in some OU to which the GPO are linked somewhere above.So, you cannot select the computers on which you want to update the policy settings.Second, you cannot specify individual settings to be processed.
By default a new GPO has a number of permissions with different access levels, but only one entry has both “read” and “apply group policy”: the special group “Authenticated Users“.
They include the Group Policy Management Console (GPMC), a Power Shell cmdlet, the PSexec executable and the Windows Management Instrumentation command line (WMIC). Windows Server 2012 introduces a new feature for updating Group Policy Object (GPO) settings on multiple remote computers.
The Group Policy Update action, which is available on the right-click context menu of an organizational unit in the GPMC, can be used to refresh GPO settings remotely, as shown in the screenshot to the left (Figure 1).
The Microsoft hotfix MS16-072 (KB 3159398) released June 14 2016 will break fundamental parts of traditional Group Policy processing.
After the hotfix is installed on a client computer no Group Policy objects that use security filtering to user groups will no longer be applied.