GPO not applied to Windows 7 and higher

There are two domain controllers. The primary works on the Windows Server 2008 R2 and the secondary on Windows Server 2012.

When I create a GPO on the primary controller, it is immediately copied to the secondary domain controller with all files and scripts.

In the GPO in the User Configuration section, I set system environment variables, as well as creating a folder on desktop and shortcuts in it.

GPO scope security filtering contains group of users, which is in the Users folder of the domain controller. Members entering into it are located in different organizational units.

If I logged on computers ruing Windows XP SP3, the policy execute immediately or after ruing gpupdate /force. On computers with an operating system version Windows 7 and higher (Windows 8.1, Windows 10) - the policy does not work out, and does not apply to the user.

In gpresult /scope user /z > c:gpo_dump.log I see that User is member of needed group, but not found GPO in applied GPOs section and in not accepted GPOs section. Why? Execute gpupdate /force and some times reboot not help.

- - , .
.