Based on your description , the GPO configuration seem no problem.
Only the group delegation were not working.
One situation can be considered that the user didn't recognize the new membership .
So i would suggest :
Log on the user and run the command : klist purge and then :gpupdate /force and check if it works.
If not , try to log off and log on again to refresh the group membership.