Hi,
I have configured access to VPN based on assignment to specific AD group. If user is in that group, VPN works, if the user is not there - VPN doesn't work.
When I try to login and my AD password is about to expire, I am able to change it whether I am member of the desired VPN AD group or not.
The goal is to block all users who are not members of the specific AD group from changing their AD passwords using AnyConnect VPN. Is it possible?
thank you
