Hi Today I faced with a problem, I had to add second gorup to my "Athentication Profile" and I can't do that... Every time when I try to past a "CN=VPN_users,OU=U,OU=Work Groups,OU=Security,OU=Groups,DC=contoso,DC=local" I got it as a user not a group, why? So finally I added "any" - but in my opinion it's bad idea because I allow all AD users to use GP. Do I am right? I have dubt, how its working.. Why I have first add a group to Device>User Identyfication>Group Mapping settings? So where I should leave "all" and where I should filter groups that are allowed for GP? How (where) to exclude one user from group that is allowed? Regards Slawek
... View more