Product defect Logged: 370386 - Using the "Enterprise" scope in GPO protection templates does not properly protect newly created GPO objects.
This defect was addressed in the 7.4 release of Change Auditor. Upgrading to this version or later is the resolution.