Hi,
Ok now we are getting somewhere. If some users cannot login and others can, the problem maybe be with the user account or ACL (Access Control List).
Workgroup manager doesn't update Server.app for some odd reason. Double check the user (can login) is ticked within Server.app
Image attached for reference.
Thanks
Aaron.