Hii..
When i enable SSO, every user who belongs to AD able to access internet, weather he is in allowed group or not, please check in attachment administrator is not a part of allowed group but he can access internet same with other users too.
Second thing when i removed SSO, than users names still coming in live log, and any user who can log in to AD, able to access net.
