Are you able to share a failed live log from a tested attempt? Without seeing your policies I am assuming that HP Device Group is referenced as a condition somewhere and your new group you are trying to use is not referenced. Hence the access failure. I would recommend double checking your policies and policy conditions in use.