

A user policy that allows access to all IP addresses will take precedence over a group policy that denies access to a single IP address. User policies take precedence over group policies and group policies take precedence over global policies, regardless of the policy definition. If there are two policies that apply to a single IP address, then a policy for a specific service (for example RDP) will take precedence over a policy that applies to all services. I cannot remote into any server on the network. I upgraded to Windows 10 Pro final version and I am able to connect to the VPN with NetExtender and even ping any server in my work network, but http and RDP are blocked. For example, a policy that applies to only one IP address will have priority over a policy that applies to a range of IP addresses. I connect to my work VPN with NetExtender (Dell Sonicwall VPN client application). The most specific policy will take precedence over less specific policies. Additional allow and deny policies may be created by destination address or address range and by service type. With group access policies, all traffic is allowed by default. NOTE: You can optionally tunnel-all SRA client traffic through the NetExtender connection by entering 0.0.0.0 for the Destination Network and Subnet Mask/Prefix in the Add Client Routes window.
