With this setting enabled, all mobile computers in the specified security groups will be enabled as DirectAccess clients. ...