Names of one or more down-level client security groups that are part of the DirectAccess deployment which need to be removed. ...

Names of one or more down-level client security groups that are part of the DirectAccess deployment which need to be removed. Specified in DOMAIN\SG_NAME format 
These down-level clients can connect only to the site specified in the EntryPointName param (see description of EntryPointName parameter for more details)