Hello,

I am trying to block logon from an AD group using configuration profile.

I have specified Allow/Deny groups in Login Window/Access option but it is being ignored.

The configuration profile applies as I can see my test banner. 

Manual configuration on a host system via System Preferences\\Users&Groups\\Login Options works fine...

Any ideas?

JK