Very nice topic and very good question, because no non ad user have to privilege's to use the VPN tunnel as it is related to our organization security. First of all, look at your policy, it might not be working or implemented yet. Second thing, segment your network which is very necessary in this case. The guest users/non ad users should be on different network and not on the same network so in this way that traffic can be controlled.

Very nice topic and very good question, because no non ad user have to privilege's to use the VPN tunnel as it is related to our organization security. First of all, look at your policy, it might not be working or implemented yet. Second thing, segment your network which is very necessary in this case. The guest users/non ad users should be on different network and not on the same network so in this way that traffic can be controlled.