I found a solution to create bat file that updates the group policy:

gpupdate /force

and put that in group policy under users as a script when logging in. link that to the groups of users OUs.