Filtering GPO not applied, why?

Question

Active Directory

Hello.
The essence of the question is simple.
I make a test policy, I put it in the root of the domain
. I put it in filtering (not WMI), a separate user. Forsim.
We go to the user, the policy was not applied, we check gpresult on the client, we see that the policy is there, but it was not applied by filtering
If we put a group that passed the test instead of the user, then everything is OK ...
In this case, the user had the rights to read the policy and apply it
Where plug?

ps
Domain opens by
\\Domain
\\domain.local
\\ip
\\netbios

images from the domain and host (the domain name is erased...)

Answer 1

In the Security tab, make sure that the "Domain Computers" group is readable, otherwise the policy may not be applied, even if it is a per-user policy.

Answer 2

Perhaps it will help you - https://techcommunity.microsoft.com/t5/core-infras...