Product defect 493011 (for user-overide GPO)
Product defect 782754 (for users-allow and users-deny GPOs)
Remove the user override and re-add.
For users-allow and users-deny if an account is not working correctly it can be added to a group and that group can be added to the users-allow or users-deny files.
Defect 493011 fixed in version 18.104.22.16877 and above.
Defect 782754 to be fixed in a future release of QAS.
The latest maintenance fix for 4.1 is available at https://support.oneidentity.com/authentication-services/kb/228689