I have two groups, /Base and /Base/SAP. I set up a user in RADIUS to return the "Class" attribute of "/Base/SAP" which is displayed in the event log. When the user logs onto the contivity using PPTP, the class is returned from RADIUS as "/Base/SAP", however the user is still bound to "/Base" and NOT to "/Base/SAP". Can anyone tell me what I'm doing wrong? I must be missing a step or two...