On Wed Nov 25, 2020 at 6:57 PM CET, Clint Dovholuk wrote: > Out of curiosity - why not just use " S-1-5-4" Interactive - " A group > that > includes all users that have logged on interactively. Membership is > controlled by the operating system." > > If the user logged on - let the turn the tunnel on/off? Isn't this akin to having no permissions at all?
Furthermore, I think the point of this feature is to give more fine-grained control to IT admins. Which it accomplishes, without introducing much complexity. Piece of beauty! Riccardo
