When restricting login for a computer list to specific groups in Workgroup Manager, a user whom you wish to grant login privileges must have direct membership in a group listed in the computer list's access list. Membership in a group that's nested within a listed group is not adequate.
To avoid this issue, add all your nested groups to the access list.