Login restrictions can be associated with Workstation objects and OUs, but not with groups of Workstation objects. If a policy is associated with a group of Workstation objects, the policy is not effective.
Do not associate login restrictions with a group of Workstation objects. Associate login restrictions only with a single Workstation object or OU.