There is a known issue with the MS16-072/KB3163622 patch. This update will break GPO’s with faulty rights. Examples: Drives appear on domain systems that should be hidden, mapping drives don’t work, and other typical GPO settings aren’t getting applied.
To resolve this issue, use the Group Policy Management Console (GPMC.MSC) and follow one of the following steps:
1. Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
2. If you are using security filtering (WMI), add the Domain Computers group with read permission.