When ever you want to allow log on remotely through a group policy and a global security group, you can try the following:
1: Create a global security group in Active Directory and add a user to that group
2: Right-click Computer > Propeties > Remote setting
2a: Select the bullet 'Allow connections from computers..etc'
2b: Click Select Users > add the global security group
3: Open Group Policy Management
3a: Navigate to 'Default Domain Controllers Policy' > right-click > Edit
3b: Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Assignment > open "Allow....."
