We want to add a domain security group to ‘Direct Access Users’ local group for testing ICA vs RDP. SID of ‘Direct Access Users’ is different with each installation, it’s random so GPO won’t work. Anyone done this?

think with Group Policy preferences you can just use the name

What him said.. just use the name in the policy

That worked. I was creating GPO in a VDA and selected the group from drop down which in turn added Name & SID of the group causing issue. I typed in the group name manually and that resolved the issue.