Re (2). I'f discovered that if I remove Guacamole admin rights from a Guacamole user, then even though that use is part of a AD/MySQL Group they don't see any of the Group's connections. This may be a related issue. By the way, I created the connections and added them to the Guacamole Group before I started adding users to the Group.
-- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
