For us, the scheduled install option has the highest success rate for
updating devices. We also have a "nudge" like notification for users who
fall through the cracks of the mechanism.
As far as I can tell, in the testing window you'd have to look for a
group and a user, and it will tell you if they are in the group. I think
this is expected behavior. - Or are you running into any other issues?