I'm probably doing something wrong but:
I have a group policy that runs a powershell script at start up.
At first it didn't run because the users in my domain didn't have permissions on powershell.exe in C:\Windows\System32\WindowsPowerShell\v1.0.
When I add permissions (I don't remove any) to a user or a group it works but after a while the permissions are reverted back to SYSTEM & Administrators and the ones I have added are gone.
What am I missing?