How to add a startup program on all users of an AD OU

I believe the easiest way using GPO. Create a Group Policy to create a Scheduled Task configured to run on User logon. On the Security Options, set the user as %LogonDomain%\%LogonUser% and tick to run when the user is connected. Scheduled Tasks never betrays you.

Configure the Scheduled Task on the User hierarchy:
User Configuration/Preferences/Control Panel Settings/Scheduled Tasks

Set the action to Start a program.

Set the security option to run as %LogonDomain%\%LogonUser%.

print image

Set the trigger option to run on specific user logon.

print image