Why is the policy applied on windows 2008, 7 but not working on windows 2012, 10?

Question

Windows

Windows 2012 domain controller. Created a policy at user logon that launches a bat file. When logon on a machine with windows 2003, windows 2008, windows 7 everything works fine. When you logon on a machine with win 2012 or win 10, the file is not executed. In this case, the file itself lies in //domain.local/netlogon. There is access to both the directory and the file. If you run it manually, the file runs without problems.
gpupdate / force tried to
reboot tried
tested on an account with admin rights
read the client logs - this policy does not try to start on clients 2012 and 10 (8 did not check)
Which way to dig?

Answer 1

Depending on where the policy is applied, the "Domain computers" group must have the rights to read this policy