To grant or deny access to groups of computers, add groups to Machine Groups. If no groups are selected, this policy applies ...