Due to confusion of the answer given by Joe in the question below and the addition of my picture and information, can the answers be merged together for fellow users looking for the answer to this question?
Question: How to allow users to login remotely when already granted right through GPO
