[gptalk] Group Policy/AD delegation issueq

What I am attempting to do:  Create an AD group that has Full control of
a specific server in an OU and can remote into this server only within
the OU (for software installation).
 
What I have done and tried:  I have a group in AD called group1 with 2
members.  This group has been added to the security tab of a server,
called server1 with Full control.  I created a GPO called test and
defined the "Allow Login through Terminal Services" and to group1.
Within the scope, I applied the policy to the OU with server1 in it, and
added the server1 to the security filter.
 
This did not work for some reason.  I even went as far as logging into
server1 and adding group1 to the remote users group to no avail.
 
What am I missing????  I know that it is probably something really
simple.

Other related posts: