Product defect 493011 (for user-overide GPO)
Product defect 782754 (for users-allow and users-deny GPOs)
Remove the user override and re-add.
For users-allow and users-deny if an account is not working correctly it can be added to a group and that group can be added to the users-allow or users-deny files.
Defect 493011 fixed in version 188.8.131.5277 and above.
Defect 782754 fixed in QAS 4.1.7 and up.
The latest maintenance fix for 4.1 is available at https://support.oneidentity.com/authentication-services/kb/228689