I am curious if this setup really works. I cant seem to get my head around it. If I follow this... there are 2 policies set up, one for Webmail and one for Facebook, both with AD groups. So if user A is in the webmail AD group, that rule would be sat...