Group Permissions for VPN Authentication

Hi,

I have PPTP and L2TP VPN Working with RADIUS authentication to AD.

However, it doesn't work unless I explicitly set PPTP or L2TP as "Enabled" in the user properties.

I would expect that the users Group (Which does have PPTP and L2TP Enabled) would take precedence over the individual.

The only other way I have been able to get it working, is enabling PPTP / L2TP in "Open Group"

In which case it actually creates a new user (<username> instead of <username>@domain.com)

Anyone had anything similar?

Thanks,

Matt