I found a solution to create bat file that updates the group policy:
gpupdate /force
and put that in group policy under users as a script when logging in. link that to the groups of users OUs.