It was in the computer portion of the GPO, installed at reboot.