Check group policy is updating
Microsoft has made constant improvements to it since Windows 2000.It allows for the configuration and deployment of pretty much anything in your Active Directory environment.Microsoft has provided great guidelines and tools in order to troubleshoot.
Within Group Policy, there are a number of options in the Computer Configuration | Policies | Administrative Templates | Windows Components | Windows Update section.
You can use this Power Shell script to optimize your GPO links and ensure that they are properly linked. Make sure that the computers or users needing the policy are in a group that is specified here.
Remember that domain users includes all users, domain computers includes all computer, and authenticated users includes all users and computers.
If you are applying a GPO to a user/security group of users, ensure that domain computers or authenticated users have the ability to read the GPO. However, that WMI filter has to evaluate to True for the object processing the GPO.
This means that if you have a WMI checking a user only setting, you can’t scope your GPO only to computers.