Changes to Dial-In Tab once enrolled

Changes to Dial-In Tab once enrolled

We have discovered this little tib it. We have been having an issue with users not being able to VPN into the network. In our environment, it is controlled by A.D. Normally on the Dial-in tab, our users are set to "Control access via Remote Access Policy". However, we have seen users get reset to "Deny Access" on this tab once they enroll into ADSelf Service.

Has anyone else ever seen this? One fix we can do is set a GPO (which we will do) but are there any other fixes out there?

                  New to ADSelfService Plus?