Hi, Synology's Radius Server is actually FreeRADIUS 3.0.15. Unfortunately they use their own "rlm_synorad" to block/deny access for specific users/groups. This is the debug output of a small test: synorad: Full name[REALM\user.name] synorad: block list[] synorad: block list[REALM\\Domain Guests] synorad: group[REALM\Group Policy Creator Owners], blockList[REALM\Domain Guests] synorad: group[REALM\ka.hq.all], blockList[REALM\Domain Guests] synorad: group[REALM\DnsAdmins], blockList[REALM\Domain Guests] synorad: group[REALM\Domain Users], blockList[REALM\Domain Guests] synorad: group[REALM\Denied RODC Password Replication Group], blockList[REALM\Domain Guests] synorad: group[REALM\ka.hq.portal], blockList[REALM\Domain Guests] synorad: group[REALM\AAD DC Administrators], blockList[REALM\Domain Guests] I was wondering if there is any way of determining the variable/attribute name the group information is stored in? I would like to do something like this in the users file: DEFAULT Synorad_Group == "REALM\ka.hq.all" Does anyone have an idea? I tried -X and -Xxxx but it doesn't give me more information. Alexander