I made a script to transfer some files to the local user's disk at logon, placed it in NETLOGON,
Created a TEST OU, and a user testusr. Linked the OU to the GPO, Placed testusr into the OU and it worked fine.
Since my goal is to include selected users from different OU's in the GPO enforcing, i created a security group testgrp, made testusr a member of this group, moved testgrp into TEST (the OU), and gave it Read & Apply GPO permissions, and then moved testusr back to the users folder (no OU), so that the GPO would be enforced at logon of any member of testgrp. After waiting for gpupdate for several hours, it still doesn't work.
Since it worked fine for an individual user, obviously the problem lies in the assigning the GPO to testgrp. Did i miss any step ??