To grant or deny access to groups of computers, add groups to Machine Groups. To grant or deny access to groups of users, ...

To grant or deny access to groups of computers, add groups to Machine Groups. To grant or deny access to groups of users, add groups to User Groups. You can configure both Machine Groups and User Groups for this policy.  If no groups are selected, this policy applies to all users.