I am having issue to get force enrolment working by using security group. I have managed to test using Organization Unit, but now I want only few people to enrol but I dont want to move their account to the different OU as they might loose other security settings.

 I have done the followings:

1. create security group

2. add users to the security group

3.connect policy settings to this group only

4. on a group policy  object, delegation tabe Add security group and allow group policy.

5. Update Domain settings on AD Selfservice

but user dont get force enrolment logon to start enrolment.

any idea what to do, will be appreciated.

Thanks

Abdul Challah