Try These Steps to Diagnose the Issue:

1. Check Active Directory domain synchronization and reassociate users
2. Verify users to ensure they’re using the right account
3. Check if the security group has been placed within a higher-level group
4. Verify if there is any user permission policy restricting the user from logging in
5. Check for user account disablement or lockout policies