so i created a test GPO with a software package, edited the security filtering of the GPO to include some test usernames and their computer names. it worked. installed the package without requiring the users to logoff and login.
question is, what made it work? is it because the "Software Package" was created under "Computer Configuration" or is it because in the "Security Filtering" i defined the computer names? if the latter, how then to deploy such software for thousands of users?