There was a change in GPOs recently (security issue that was corrected in Windows Update KB3163622) that I'm pretty sure is what you're running into.
After the new security change, if Authenticated Users is not in the Delegation tab, the GPO won't work (period).
When you remove Authenticated Users from the Security Filter via the GUI, it ALSO removes it from the Delegation tab. This used to not be a problem, now it is. :)
So, after you remove Authenticated Users from the Security Filtering, add them (back) into the Delegation tab (Read-only access should be enough), and then continue editing you Security Filter as you wish.