This documentation details a known problem and workaround.
If your department currently has its own Windows domain, you likely leverage the ‘Domain Computers’ group to restrict access to some resources. When you move to a shared domain like the NETID domain, ‘Domain Computers’ is not just your department’s computers any longer. However, the delegated OUs offering provides a convenient replacement for this functionality: ‘OU Computers’ groups.
Each delegated OU has a special group which contains all the computers in that delegated OU.
Your delegated OU computer group is named:
These groups are updated with the latest list of computers in your delegated OU every hour.