We are faced with GP problem after installing KB3163622 update .
All Policies with security filters weren’t proceeded by updated (with mentioned KB) clients.
Following error logged by command gpresult /v:
Filtering: Not Applied (Unknown Reason)
No additional information logged in eventlog.
Microsoft says that they change processing procedure and now when you add security filter you also should add either “Authentificated Users” group or “Domain Computers” group with Read permission (Don’t add Apply access for this groups) on Delegated tab.
If you have a lot of policies with filters you can use PowerShell Script from Microsoft Gallery, this script will check all policies and add appropriate permissions.