...
Enter the name, e.g. "DualShield Windows Logon Client G2"
and then click "OK"
Expand "Group Policy Objects"
Select the newly created GPO, i.e. "DualShield Windows Logon Client G2"
On the right pane, in the section "Security Filtering", remove "Authenticated Users" and Add "DualShield 2FA Computers "
Now, right Right click the newly created GPO, and select "Edit"
...