No offense meant. I am just being thorough. I have already experienced applications that allow authentication through AD that only perceive groups for the authentication. Once you are past that, there is no access to AD group information. On 5/10/22, 09:44, "Alan DeKok" <aland@deployingradius.com> wrote: On May 10, 2022, at 9:16 AM, White, Daniel E. (GSFC-770.0)[AEGIS] via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote: > > Thanks. > Does the AD-LDAP connection provide AD groups to allow user "filtering" ? That is what I said. I'm not sure why there's a need to double-check the answers I give. It's not productive. See also the documentation, or the mods-available/ldap file. There is *extensive* documentation on using AD groups. Alan DeKok.