If you enable this ability, does it remove the ability to start VPN without logging out of Windows? In other words, can they log in both ways or does it take the place of starting the Cisco Anyconnect Secure Mobility Client 3.1 from within Windows X...