User group policy commands run as user
This policy specifies whether to run user group policy commands as the current user. The default for this parameter is false, which means that the service runs these commands as administrator/root.
The RunCommand.pl script reads this policy setting and if the policy s set to true, then it runs commands as follows:
su - $args ->user() -c $command